Jason Geffner on LinkedIn: Patching Perforce perforations: Critical RCE vulnerability discovered in…

Principal Security Architect at Microsoft

10mo

I recently discovered a new CVSS 10.0 vulnerability in Perforce Helix Core Server that allows for unauthenticated remote code execution (RCE) as LocalSystem. Read all about it and three new CVSS 7.5 vulnerabilities in my blog post below. https://lnkd.in/g6J3MFqq

Patching Perforce perforations: Critical RCE vulnerability discovered in Perforce Helix Core Server | Microsoft Security Blog

https://www.microsoft.com/en-us/security/blog

5 Comments

Guy Arazi

Senior Security Researcher @ MSRC V&M Microsoft | Vulnerability Researcher | Cloud & AppSec Enthusiast

10mo

I really like how you've broken down your research from the ground up in your blog post. It's awesome and I think it'll be super helpful for other security researchers too! Kudos 💪