CVE-2020-16268

The MSI installer in 1E Client 4.1.0.267 and 5.0.0.745 allows remote authenticated users and local users to gain elevated privileges via the repair option. This applies to installations that have a TRANSFORM MST with the option to disable the installation of the Nomad module. An attacker may craf...

CVE-2020-16268

The CVE-2020-16268 entry concerns the 1E Client MSI installer (versions 4.1.0.267 and 5.0.0.745). The flaw arises when using the repair option with a Transform (MST) that can disable the Nomad module; an attacker can craft a .reg file in a specific location to write to any registry key as an elev...

1E Client 权限许可和访问控制问题漏洞

1E Client is an agent-less endpoint management software from 1E 1E Client USA. An elevation of privilege vulnerability exists in 1E Client versions 4.1.0.267 and 5.0.0.745 that allows remote authenticated users and local users to gain elevated privileges via the REPAIR option. This applies to...