PT-2020-10288
CVE-2019-19895
·
تاريخ النشر
2020-01-23
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAC:L/AV:L/A:H/C:H/I:H/PR:L/S:C/UI:N
Name of the Vulnerable Software and Affected Versions
IXP EasyInstall version 6.2.13723
Description
The issue allows for lateral movement using the Agent Service against other users on a client system. An authenticated attacker can modify the
EveryLogon.bat file located at %SYSTEMDRIVE%IXPSW[PACKAGE CODE] to achieve this movement and execute code in the context of other users.Recommendations
For IXP EasyInstall version 6.2.13723, consider restricting access to the
EveryLogon.bat file to prevent unauthorized modifications until a patch is available. Additionally, monitor system activity for suspicious modifications to this file. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾