CVE-2020-27383

Name of the Vulnerable Software and Affected Versions: Battle.Net version 1.27.1.12428

Description: The issue arises from a weak set of permissions granted to the Authenticated Users Group, which allows an authenticated user to modify the existing executable file with a binary of their choice, effectively elevating privileges. This is due to the group being granted the (F) Flag aka Full Control.

Recommendations: For Battle.Net version 1.27.1.12428, consider restricting the permissions granted to the Authenticated Users Group to prevent elevation of privileges, specifically removing the (F) Flag aka Full Control to mitigate the risk of exploitation.