PT-2023-22430 · Webroot · Webroot Secureanywhere Endpoint Protection Ce
CVE-2023-29818
·
Published
2023-05-12
·
Updated
2026-07-05
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Webroot SecureAnywhere Endpoint Protection CE versions 9.0.33.39 and before
Description
An issue in Webroot SecureAnywhere Endpoint Protection CE allows a local attacker to bypass protections via the default allowlist feature being stored as non-admin.
Recommendations
For versions 9.0.33.39 and before, consider restricting access to the default allowlist feature until a patch is available.
As a temporary workaround, review and modify the allowlist settings to ensure they are stored with appropriate administrative privileges.
Fix
Incorrect Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Webroot Secureanywhere Endpoint Protection Ce