CVE-2017-5873

Unquoted Windows search path vulnerability in the guest service in Unisys s-Par before 4.4.20 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe.

Score

CVSS 3.0 6.7 Medium

Status

Modified - cve@mitre.org

Published

2017-04-11

Last modified

2024-08-05

Weaknesses

CWE-428

Affected products

• Secure Partitioning (Unisys)

References

• http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=41