CVE-2012-4767 Privilege escalation in n/a
A malicious user can decrypt and modify security policies via the log file, leading to privilege escalation and policy bypass.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2012-4767?
CVE-2012-4767 is a medium-severity vulnerability in n/a, published on 13 Jan 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An issue exists in Safend Data Protector Agent 3.4.5586.9772 in the securitylayer.log file in the logs.9972 directory, which could let a malicious user decrypt and potentially change the Safend security policies applied to the machine.
Weakness: CWE-269
Which versions are affected by CVE-2012-4767?
It affects 1 product.
Products include Safend Data Protector Agent.
How do I fix CVE-2012-4767?
No fix has been published for CVE-2012-4767 yet. Limit exposure of the affected software until one is available.
Is CVE-2012-4767 being exploited?
There is no known exploitation of CVE-2012-4767 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-m9w5-cf98-5rcm.