Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xx2r-f4xg-6rg7

Опубликовано: 29 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

Malwarebytes AdwCleaner 8.4.0 runs as Administrator and performs an insecure file delete operation on C:\AdwCleaner\Logs\AdwCleaner_Debug.log in which the target location is user-controllable, allowing a non-admin user to escalate privileges to SYSTEM via a symbolic link.

Malwarebytes AdwCleaner 8.4.0 runs as Administrator and performs an insecure file delete operation on C:\AdwCleaner\Logs\AdwCleaner_Debug.log in which the target location is user-controllable, allowing a non-admin user to escalate privileges to SYSTEM via a symbolic link.

EPSS

Процентиль: 64%
0.00469
Низкий

7.8 High

CVSS3

Дефекты

CWE-59

Связанные уязвимости

CVSS3: 7.8
nvd
больше 2 лет назад

Malwarebytes AdwCleaner 8.4.0 runs as Administrator and performs an insecure file delete operation on C:\AdwCleaner\Logs\AdwCleaner_Debug.log in which the target location is user-controllable, allowing a non-admin user to escalate privileges to SYSTEM via a symbolic link.

EPSS

Процентиль: 64%
0.00469
Низкий

7.8 High

CVSS3

Дефекты

CWE-59