Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xx2r-f4xg-6rg7

Опубликовано: 29 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

Malwarebytes AdwCleaner 8.4.0 runs as Administrator and performs an insecure file delete operation on C:\AdwCleaner\Logs\AdwCleaner_Debug.log in which the target location is user-controllable, allowing a non-admin user to escalate privileges to SYSTEM via a symbolic link.

Malwarebytes AdwCleaner 8.4.0 runs as Administrator and performs an insecure file delete operation on C:\AdwCleaner\Logs\AdwCleaner_Debug.log in which the target location is user-controllable, allowing a non-admin user to escalate privileges to SYSTEM via a symbolic link.

EPSS

Процентиль: 38%
0.00489
Низкий

7.8 High

CVSS3

Дефекты

CWE-59

Связанные уязвимости

CVSS3: 7.8
nvd
больше 3 лет назад

Malwarebytes AdwCleaner 8.4.0 runs as Administrator and performs an insecure file delete operation on C:\AdwCleaner\Logs\AdwCleaner_Debug.log in which the target location is user-controllable, allowing a non-admin user to escalate privileges to SYSTEM via a symbolic link.

EPSS

Процентиль: 38%
0.00489
Низкий

7.8 High

CVSS3

Дефекты

CWE-59