title: DXL Broker privilege escalation vulnerability
description: Privilege escalation vulnerability in DXL Broker for Windows prior to 6.0.0.280 allows local users to gain elevated privileges by exploiting weak directory controls in the logs directory. This can lead to a denial-of-service attack on the DXL Broker.
problem types: cwe-274: Privilege Escalation
affected:
{
defaultStatus: unaffected
platforms: Windows
product: DXL Broker
vendor: Trellix
versions:
lessThan: 6.0.0.280, status: affected, version: 5.x, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL