EUVD-2019-2475

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Thomson Reuters Eikon 4.0.42144 has weak permissions allowing local users to modify service file

Reporter	Title	Published	Views	Family All 9
0day.today	Eikon Thomson Reuters 4.0.42144 File Permissions Vulnerability	28 Aug 202000:00	–	zdt
Circl	CVE-2019-10679	3 Sep 202018:55	–	circl
CVE	CVE-2019-10679	3 Sep 202014:40	–	cve
Cvelist	CVE-2019-10679	3 Sep 202014:40	–	cvelist
NVD	CVE-2019-10679	3 Sep 202015:15	–	nvd
OSV	CVE-2019-10679	3 Sep 202015:15	–	osv
Packet Storm	Eikon Thomson Reuters 4.0.42144 File Permissions	27 Aug 202000:00	–	packetstorm
Prion	Code injection	3 Sep 202015:15	–	prion
RedhatCVE	CVE-2019-10679	22 May 202507:50	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "0e7b6cc5-2e1d-320d-83fc-960b16ca4b57",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "8db8e041-25d1-3387-acdd-a04d0de2f93c",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/cve/CVE-2019-10679
thomsonreuters	www.thomsonreuters.com/en/products-services.html
sec-consult	www.sec-consult.com/en/vulnerability-lab/advisories/index.html
seclists	www.seclists.org/fulldisclosure/2020/Aug/19
packetstormsecurity	www.packetstormsecurity.com/files/158989/Eikon-Thomson-Reuters-4.0.42144-File-Permissions.html
sec-consult	www.sec-consult.com/en/blog/advisories/extensive-file-permissions-on-service-executable-in-eikon-thomson-reuters-cve-2019-10679/
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.8

CVSS 27.2

EPSS0.00148

service executable permissions vulnerability local users thomson reuters eikon