← Back

CVE-2017-14124

nvd nist
Published: Sep 13, 2017Modified: May 13, 2026

JSON object

Loading...
6.3
Vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Exploitability: 1.0 / Impact: 5.2
Source: NVD

Description

In eLux RP 5.x before 5.5.1000 LTSR and 5.6.x before 5.6.2 CR when classic desktop mode is used, it is possible to start applications other than defined, even if the user does not have permissions to change application definitions.

Affected (22)

Products: Unicon Software: Rp
Unicon Software
1 product
Rp
Configuration A
22 vulnerable
Vulnerable SoftwareAffected Versions
Unicon Software
Rp
Up to 5.6.0
Rp
Up to 5.5.0
Rp
Version 4.0.1
Rp
Version 4.10.0
Rp
Version 4.11.0
Rp
Version 4.11.1
Rp
Version 4.11.3
Rp
Version 4.11.5
Rp
Version 4.2
Rp
Version 4.4.0
Rp
Version 4.5.0
Rp
Version 4.6.0
Rp
Version 4.7.0
Rp
Version 4.7.1
Rp
Version 4.8.0
Rp
Version 4.9.0
Rp
Version 5.0.0
Rp
Version 5.1.0
Rp
Version 5.2.0
Rp
Version 5.3.0
Rp
Version 5.4.0
Rp
Version 5.4.1

Related CWEs

CWE-269
Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (2)

Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.