VULNERABILITY INTELLIGENCE

CVE-2011-1056

CVSS score6.2 MEDIUM
EPSS probability0.28%
CISA KEVNot currently listed
Published2011-02-21
Last modified2026-06-16
CVSS vectorAV:L/AC:H/Au:N/C:C/I:C/A:C

Description

The installer for Metasploit Framework 3.5.1, when running on Windows, uses weak inherited permissions for the Metasploit installation directory, which allows local users to gain privileges by replacing critical files with a Trojan horse.

Primary references