PT-2019-15548
CVE-2019-18645
·
Published
2019-10-30
·
Updated
2020-08-24
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Total Defense Anti-virus version 11.5.2.28
Description
The quarantine restoration function is susceptible to symbolic link attacks. This allows files to be written to privileged directories.
Recommendations
For Total Defense Anti-virus version 11.5.2.28, consider disabling the quarantine restoration function until a patch is available to prevent potential exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾