PT-2021-10797
CVE-2020-22809
·
Published
2021-05-10
·
Updated
2021-05-20
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Windscribe version 1.83 Build 20
Description
The issue is related to an Unquoted Service Path in the 'WindscribeService' of Windscribe, which can facilitate privilege escalation.
Recommendations
For Windscribe version 1.83 Build 20, consider updating to a newer version that quotes the service path to prevent privilege escalation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾