| Title | シスコシステムズの Cisco AppDynamics PHP Agent における脆弱性 |
|---|---|
| Summary | シスコシステムズの Cisco AppDynamics PHP Agent には、不特定の脆弱性が存在します。 |
| Possible impacts | 情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。 |
| Solution | ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。 |
| Publication Date | Nov. 15, 2023, midnight |
| Registration Date | Jan. 10, 2024, 2:33 p.m. |
| Last Update | Jan. 10, 2024, 2:33 p.m. |
| CVSS3.0 : 重要 | |
| Score | 7.8 |
|---|---|
| Vector | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| シスコシステムズ |
| Cisco AppDynamics PHP Agent 21.2.7 |
| Cisco AppDynamics PHP Agent 21.2.8 |
| Cisco AppDynamics PHP Agent 21.4.0 |
| Cisco AppDynamics PHP Agent 21.4.10 |
| Cisco AppDynamics PHP Agent 21.4.11 |
| Cisco AppDynamics PHP Agent 21.4.2 |
| Cisco AppDynamics PHP Agent 21.4.3 |
| Cisco AppDynamics PHP Agent 21.4.4 |
| Cisco AppDynamics PHP Agent 21.4.5 |
| Cisco AppDynamics PHP Agent 21.4.6 |
| Cisco AppDynamics PHP Agent 21.4.7 |
| Cisco AppDynamics PHP Agent 21.4.8 |
| Cisco AppDynamics PHP Agent 21.4.9 |
| Cisco AppDynamics PHP Agent 21.5.0 |
| Cisco AppDynamics PHP Agent 21.6.0 |
| Cisco AppDynamics PHP Agent 21.7.0 |
| Cisco AppDynamics PHP Agent 22.1.0 |
| Cisco AppDynamics PHP Agent 22.1.1 |
| Cisco AppDynamics PHP Agent 22.3.0 |
| Cisco AppDynamics PHP Agent 22.8.0 |
| No | Changed Details | Date of change |
|---|---|---|
| 1 | [2024年01月10日] 掲載 |
Jan. 10, 2024, 2:33 p.m. |
| Summary | A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient permissions that are set by the PHP Agent Installer on the PHP Agent install directory. An attacker could exploit this vulnerability by modifying objects in the PHP Agent install directory, which would run with the same privileges as PHP. A successful exploit could allow a lower-privileged attacker to elevate their privileges to root on an affected device. |
|---|---|
| Publication Date | Nov. 22, 2023, 4:15 a.m. |
| Registration Date | Nov. 22, 2023, 10 a.m. |
| Last Update | Nov. 21, 2024, 4:41 p.m. |
| Configuration1 | or higher | or less | more than | less than | |
| cpe:2.3:a:cisco:appdynamics:21.2.7:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:cisco:appdynamics:21.2.8:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:cisco:appdynamics:21.4.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:cisco:appdynamics:21.4.10:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:cisco:appdynamics:21.4.11:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:cisco:appdynamics:21.4.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:cisco:appdynamics:21.4.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:cisco:appdynamics:21.4.4:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:cisco:appdynamics:21.4.5:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:cisco:appdynamics:21.4.6:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:cisco:appdynamics:21.4.7:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:cisco:appdynamics:21.4.8:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:cisco:appdynamics:21.4.9:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:cisco:appdynamics:21.5.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:cisco:appdynamics:21.6.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:cisco:appdynamics:22.1.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:cisco:appdynamics:22.1.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:cisco:appdynamics:22.11.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:cisco:appdynamics:22.3.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:cisco:appdynamics:22.10.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:cisco:appdynamics:22.12.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:cisco:appdynamics:22.12.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:cisco:appdynamics:21.7.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:cisco:appdynamics:22.8.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:cisco:appdynamics:23.2.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:cisco:appdynamics:23.4.0:*:*:*:*:*:*:* | |||||