| |
Vulnerability CVE-2020-7867
Published: 2021-10-27
| Description: |
An improper input validation vulnerability in Helpu solution could allow a local attacker to arbitrary file creation and execution without click file transfer menu. It is possible to file in arbitrary directory for user because the viewer program receive the file from agent with privilege of administrator. |
Type:
CWE-20 (Improper Input Validation)
CVSS2 => (AV:L/AC:L/Au:N/C:P/I:P/A:P)
| CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
4.6/10 |
6.4/10 |
3.9/10 |
| Exploit range |
Attack complexity |
Authentication |
Local |
Low |
No required |
| Confidentiality impact |
Integrity impact |
Availability impact |
Partial |
Partial |
Partial |
References: |
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36303
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
