RSS   Podatności dla 'Time tracker'   RSS

2019-07-23
 
CVE-2019-12162

CWE-264
 

 
Upwork Time Tracker 5.2.2.716 doesn't verify the SHA256 hash of the downloaded program update before running it, which could lead to code execution or local privilege escalation by replacing the original update.exe.

 


Copyright 2024, cxsecurity.com

 

Back to Top