CVE-2015-7378
HIGHWatchguard Panda Url Filtering - Incorrect Default Permissions
Title source: ruleDescription
Panda Security URL Filtering before 4.3.1.9 uses a weak ACL for the "Panda Security URL Filtering" directory and installed files, which allows local users to gain SYSTEM privileges by modifying Panda_URL_Filteringb.exe.
Exploits (1)
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry x_refsource_misc
http://packetstormsecurity.com/files/136607/Panda-Security-URL-Filtering-Privilege-Escalation.html
Third Party Advisory, VDB Entry exploit
x_refsource_exploit-db
https://www.exploit-db.com/exploits/39670/
Mailing List, Third Party Advisory mailing-list
x_refsource_fulldisc
http://seclists.org/fulldisclosure/2016/Apr/25
Scores
CVSS v3
7.8
EPSS
0.0018
EPSS Percentile
39.3%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-276
Status
published
Products (1)
watchguard/panda_url_filtering
< 4.3.1.8
Published
Apr 18, 2016
Tracked Since
Feb 18, 2026