CVE-2024-9950
A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows unauthenticated user to modify compliance scripts due to insecure temporary directory.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.5
- CVSS vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:H/SI:H/SA:H
- EPSS probability
- 0.31%
- CWE
- CWE-379
- Published
- 2025-01-02
- Last modified
- 2026-03-13
Affected products
- Forescout SecureConnector
Weakness type
Related vulnerabilities
- CVE-2026-69482 — Windows Error Reporting Tampering Vulnerability
- CVE-2026-85028 — Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit
- CVE-2026-82346 — HP ImageDiags - Potential Escalation of Privilege
- CVE-2026-63693 — Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following')...
- CVE-2026-12555 — HP Easy Start for macOS - Security Update
- CVE-2026-50544 — NortheBridge/luminalshine has Incorrect Permission Assignment for Critical Resource and Creation of Temporary File in Directory with Insecure Permissions
- CVE-2026-14551 — Local Privilege Escalation in servereye client (sensorhub)
- CVE-2026-46388 — osquery: Unprivileged users can temporarily read file carve contents