PT-2021-11389
CVE-2020-27383
·
تاريخ النشر
2021-06-09
·
تاريخ التحديث
2021-06-17
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Battle.Net version 1.27.1.12428
Description:
The issue arises from a weak set of permissions granted to the
Authenticated Users Group, which allows an authenticated user to modify the existing executable file with a binary of their choice, effectively elevating privileges. This is due to the group being granted the (F) Flag aka Full Control.Recommendations:
For Battle.Net version 1.27.1.12428, consider restricting the permissions granted to the
Authenticated Users Group to prevent elevation of privileges, specifically removing the (F) Flag aka Full Control to mitigate the risk of exploitation.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾