Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2020-7382

Unquoted Path in Rapid7 Nexpose Installer

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
rapid7

Description

Rapid7 Nexpose installer version prior to 6.6.40 contains an Unquoted Search Path which may allow an attacker on the local machine to insert an arbitrary file into the executable path. This issue affects: Rapid7 Nexpose versions prior to 6.6.40.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rapid7 Nexpose

  • unspecified to < 6.6.40affected

References