Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-7867

Опубликовано: 27 окт. 2021
Источник: nvd
CVSS3: 8
CVSS3: 7.8
CVSS2: 4.6
EPSS Низкий

Описание

An improper input validation vulnerability in Helpu solution could allow a local attacker to arbitrary file creation and execution without click file transfer menu. It is possible to file in arbitrary directory for user because the viewer program receive the file from agent with privilege of administrator.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:helpu:helpuviewer:2018.5.21.0:*:*:*:*:windows:*:*

EPSS

Процентиль: 61%
0.00409
Низкий

8 High

CVSS3

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-20
CWE-20

Связанные уязвимости

github
больше 3 лет назад

An improper input validation vulnerability in Helpu solution could allow a local attacker to arbitrary file creation and execution without click file transfer menu. It is possible to file in arbitrary directory for user because the viewer program receive the file from agent with privilege of administrator.

EPSS

Процентиль: 61%
0.00409
Низкий

8 High

CVSS3

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-20
CWE-20