CVE-2020-6012

2020-08-0413:35:42

CWE-59

checkpoint

www.cve.org

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.0%

JSON

ZoneAlarm Anti-Ransomware before version 1.0.713 copies files for the report from a directory with low privileges. A sophisticated timed attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links. This allows an unprivileged user to enable escalation of privilege via local access.

CNA Affected

[
  {
    "product": "ZoneAlarm Anti-Ransomware",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "before 1.0.713"
      }
    ]
  }
]