PT-2014-8846
CVE-2014-9141
·
تاريخ النشر
2014-12-03
·
تاريخ التحديث
2014-12-17
الوصف من
CVSS 2.0
7.2
عاليةالمقاييسAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Thomson Reuters Fixed Assets CS versions 13.1.4 and earlier
Description
The issue concerns weak permissions set by the installer for the connectgdll.exe program, allowing local users to execute arbitrary code by modifying this program.
Recommendations
For versions 13.1.4 and earlier, consider restricting access to the connectgdll.exe program to prevent local users from modifying it until a fix is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾