PT-2020-14479
CVE-2020-15528
·
تاريخ النشر
2020-07-05
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 2.0
9.3
عاليةالمقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
GOG Galaxy Client version 2.0.17
Description
An issue in the GOG Galaxy Client allows for local escalation of privileges. This occurs when a user starts or uninstalls a game due to weak file permissions and missing file integrity checks.
Recommendations
For GOG Galaxy Client version 2.0.17, update to a newer version that addresses the weak file permissions and missing file integrity checks to prevent local escalation of privileges. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾