CVE-2026-12164

4.4 Moyenne

Publiée le 24/06/2026 à 01:16 · Modifiée le 29/06/2026 à 18:21 · Analysée par le NVD · Source : df4dee71-de3a-4139-9588-11b62fe6c0ff

Description

Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, particularly when the import also creates or changes roles or role-permission relationships.

Traduire en français

Produits concernés

Fortra File Integrity Monitoring (FIM)
Fortra file integrity monitoring

Scores CVSS

Version	Score	Source	Vecteur
3.1	4.4 Moyenne	df4dee71-de3a-4139-9588-11b62fe6c0ff	`CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N`

Faiblesses (CWE)

CWE-266

Références

https://www.fortra.com/security/advisories/product-security/fi-2026-010 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories