Code Injection in Rapid7 Nexpose Installer
CVE-2020-7381

5.8MEDIUM

Key Information:

Vendor

Rapid7

Status
Nexpose
Vendor
CVE Published:
3 September 2020

What is CVE-2020-7381?

In Rapid7 Nexpose installer versions prior to 6.6.40, the Nexpose installer calls an executable which can be placed in the appropriate directory by an attacker with access to the local machine. This would prevent the installer from distinguishing between a valid executable called during a Security Console installation and any arbitrary code executable using the same file name.

Affected Version(s)

Nexpose < 6.6.40

References

https://help.rapid7.com/insightvm/en-us/release-notes/ind...
x_refsource_MISC

CVSS V3.1

Score:
5.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This issue was discovered and reported by Mishra Dhiraj.
.