CVE-2024-43614Relative Path Traversal in Microsoft Defender FOR Endpoint FOR Linux

Severity
5.5MEDIUMNVD
EPSS
0.4%
top 40.45%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedOct 8

Description

Relative path traversal in Microsoft Defender for Endpoint allows an authorized attacker to perform spoofing locally.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

Patches

🔴Vulnerability Details

1
GHSA
GHSA-gx6j-7m5h-xh87: Microsoft Defender for Endpoint for Linux Spoofing Vulnerability2024-10-08

📋Vendor Advisories

1
Microsoft
Microsoft Defender for Endpoint for Linux Spoofing Vulnerability2024-10-08

🕵️Threat Intelligence

3
Bleepingcomputer
Microsoft October 2024 Patch Tuesday fixes 5 zero-days, 118 flaws2024-10-08
Trendmicro
The October 2024 Security Update Review2024-10-08
Trendmicro
The October 2024 Security Update Review2024-10-08