← volver
CVE-2020-7867

Helpu arbitrary file creation vulnerability

CVSS 8 HIGHEPSS 0.8%CWE-20
An improper input validation vulnerability in Helpu solution could allow a local attacker to arbitrary file creation and execution without click file transfer menu. It is possible to file in arbitrary directory for user because the viewer program receive the file from agent with privilege of administrator.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Productos afectados
HelpU · HelpuViewer.exe

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →