VULNERABILITY INTELLIGENCE
CVE-2017-14124
CVSS score6.3 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2017-09-13
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Description
In eLux RP 5.x before 5.5.1000 LTSR and 5.6.x before 5.6.2 CR when classic desktop mode is used, it is possible to start applications other than defined, even if the user does not have permissions to change application definitions.
Weakness classification
- CWE-269: Improper Privilege Management
Primary references
- cve@mitre.org — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory