← voltar
CVE-2020-7867

Helpu arbitrary file creation vulnerability

CVSS 8 HIGHEPSS 0.8%CWE-20
An improper input validation vulnerability in Helpu solution could allow a local attacker to arbitrary file creation and execution without click file transfer menu. It is possible to file in arbitrary directory for user because the viewer program receive the file from agent with privilege of administrator.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
HelpU · HelpuViewer.exe

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →