PT-2021-11941
CVE-2020-36161
·
تاريخ النشر
2021-01-06
·
تاريخ التحديث
2021-01-12
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Veritas APTARE versions 10.4 through 10.4P8
Veritas APTARE versions 10.5 through 10.5P2
Description:
An issue was discovered in Veritas APTARE where a low privileged user can create a directory at the configuration file locations under C:. When the Windows system restarts, a malicious OpenSSL engine could exploit arbitrary code execution as SYSTEM, giving the attacker administrator access on the system. This allows the attacker to access all data and all installed applications.
Recommendations:
For Veritas APTARE versions 10.4 through 10.4P8, update to version 10.4P9 or later.
For Veritas APTARE versions 10.5 through 10.5P2, update to version 10.5P3 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾