CVE-2025-0712
BaseFortify
Publication date: 2025-07-30
Last updated on: 2025-07-31
Assigner: Elastic
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-427 | The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an uncontrolled search path element issue caused by insecure directory permissions. It allows an attacker with local access to exploit improper handling of directory permissions to move and delete arbitrary files. This can lead to local privilege escalation, potentially allowing the attacker to gain SYSTEM-level privileges.
How can this vulnerability impact me? :
If exploited, this vulnerability can allow an attacker with local access to escalate their privileges to SYSTEM level. This means the attacker could gain full control over the affected system, including the ability to modify or delete critical files, install malicious software, and compromise system integrity and confidentiality.