CVE-2020-13431

Name of the Vulnerable Software and Affected Versions I2P versions prior to 0.9.46

Description The issue allows local users to gain privileges via a Trojan horse I2PSvc.exe file because of weak permissions on a certain %PROGRAMFILES% subdirectory.

Recommendations For versions prior to 0.9.46, update to version 0.9.46 or later to resolve the issue. As a temporary workaround, consider restricting access to the %PROGRAMFILES% subdirectory to minimize the risk of exploitation.