CVE-2020-7381 | BDVDB-2026-141013 Detail

Description#

In Rapid7 Nexpose installer versions prior to 6.6.40, the Nexpose installer calls an executable which can be placed in the appropriate directory by an attacker with access to the local machine. This would prevent the installer from distinguishing between a valid executable called during a Security Console installation and any arbitrary code executable using the same file name.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12020-09-03Record published in the CVE List.
2. Version 22024-08-04Most recent update recorded in the CVE List.