CRITICAL🇬🇧 English

CVE-2020-27172

CVSS 9.8v3.1pub. 2020-12-28upd. 2024-11-21

An issue was discovered in G-Data before 25.5.9.25 using Symbolic links, it is possible to abuse the infected-file restore mechanism to achieve arbitrary write that leads to elevation of privileges.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Gdatasoftware G Data

    APP
    Gdatasoftware
    < 25.5.9.25
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje