PT-2018-13221

CVE-2018-15809

·

Published

2018-08-23

·

Updated

2020-08-24

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions AccuPOS version 2017.8
Description The issue concerns an insecure permission setting, specifically "Authenticated Users: Modify", applied to files within the installation path. This setting may enable local attackers to compromise the integrity of critical resource and executable files.
Recommendations For AccuPOS version 2017.8, consider changing the permission setting from "Authenticated Users: Modify" to a more restrictive setting to prevent local attackers from modifying critical files.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾