Privilege escalation in Flexera Flexnet Manager
CVE-2017-6894
A vulnerability exists in FlexNet Manager Suite releases 2015 R2 SP3 and earlier (including FlexNet Manager Platform 9.2 and earlier) that affects the inventory gathering components and can be exploited by local users to perform certain actions with elevated privileges on the local system.
Vulnerability class: Privilege Escalation
EPSS: 0.002 (6.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Flexera Flexnet_manager
- Flexera Flexnet_manager_suite_2015 — versions r2
- N/a — versions n/a
Weakness classification (CWE)
References
- PSIRT-CNA@flexerasoftware.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2017-6894?
- CVE-2017-6894 is a high-severity vulnerability in Flexera Flexnet Manager, classified under Improper Privilege Management. CVSS score: 7.8/10. Published 2023-03-29.
- How severe is CVE-2017-6894?
- High severity. CVSS v3 base score is 7.8 out of 10.