PT-2020-12726
CVE-2020-11613
·
تاريخ النشر
2020-06-11
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Mids' Reborn Hero Designer version 2.6.0.7
Description
The issue arises from default and insecure permissions set for the installation folder, allowing the Authenticated Users group to have Modify permissions. This enables any user on the system to replace binaries or plant malicious DLLs, potentially obtaining elevated or different privileges depending on the context of the user running the application.
Recommendations
For version 2.6.0.7, consider restricting the permissions of the installation folder to prevent unauthorized access and modifications, specifically removing the Modify permissions for the Authenticated Users group. As a temporary workaround, restrict access to the installation directory to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾