← back
CVE-2020-7382

Unquoted Path in Rapid7 Nexpose Installer

CVSS 6.8 MEDIUMEPSS 0.3%CWE-428
Rapid7 Nexpose installer version prior to 6.6.40 contains an Unquoted Search Path which may allow an attacker on the local machine to insert an arbitrary file into the executable path. This issue affects: Rapid7 Nexpose versions prior to 6.6.40.
CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
Affected products
Rapid7 · Nexpose

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://help.rapid7.com/insightvm/en-us/release-notes/index.html?pid=6.6.40