PT-2018-13054
CVE-2018-15491
·
تاريخ النشر
2018-08-18
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Zemana Anti-Logger versions prior to 1.9.3.602
Description
A flaw in the permission and encryption implementation allows an attacker to control the whitelisting feature, enabling the execution of unauthorized applications, such as keystroke recorders, by modifying the MyRules2.ini file under %LOCALAPPDATA%ZemanaZALSDK.
Recommendations
For versions prior to 1.9.3.602, update to version 1.9.3.602 or later to resolve the issue. As a temporary workaround, consider restricting access to the MyRules2.ini file to prevent unauthorized modifications until a patch is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾