CVE-2020-11613

Name of the Vulnerable Software and Affected Versions Mids' Reborn Hero Designer version 2.6.0.7

Description The issue arises from default and insecure permissions set for the installation folder, allowing the Authenticated Users group to have Modify permissions. This enables any user on the system to replace binaries or plant malicious DLLs, potentially obtaining elevated or different privileges depending on the context of the user running the application.

Recommendations For version 2.6.0.7, consider restricting the permissions of the installation folder to prevent unauthorized access and modifications, specifically removing the Modify permissions for the Authenticated Users group. As a temporary workaround, restrict access to the installation directory to minimize the risk of exploitation.