PT-2023-15623 · Acuant · Acuant Acufill Sdk

Name of the Vulnerable Software and Affected Versions: Acuant AcuFill SDK versions prior to 10.22.02.03 Description: An issue was discovered in the Acuant AcuFill SDK. During installation, an executable file gets executed out of the C:WindowsTemp directory. A standard user can create the path fil...

Acuant AsureID Sentinel 安全漏洞

Acuant AsureID Sentinel is an automated solution for authentication and file certification from Acuant USA. A security vulnerability exists in Acuant AsureID Sentinel. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

Acuant AsureID Sentinel 日志信息泄露漏洞

Acuant AsureID Sentinel is an automated solution for authentication and file certification from Acuant USA. A security vulnerability exists in Acuant AsureID Sentinel. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

CVE-2022-48228

CVE-2022-48228 affects Acuant AsureID Sentinel, with vulnerable component behavior before version 5.2.149. The issue is that installer log files for i-Dentify and Sentinel Installer are written to the root of the C: drive (CORE-7362). Public references consistently describe the vulnerability as a...

CVE-2022-48222

Summary: CVE-2022-48222 affects Acuant AcuFill SDK prior to version 10.22.02.03. During installation, certutil.exe is invoked by the installer to install certificates; the window is not hidden and runs with elevated privileges. A standard user can break out of this window and obtain a full SYSTEM...

PT-2023-15625 · Acuant · Acuant Asureid Sentinel

Name of the Vulnerable Software and Affected Versions: Acuant AsureID Sentinel versions prior to 5.2.149 Description: An issue was discovered where the software uses the root of the C: drive for the i-Dentify and Sentinel Installer log files. Recommendations: For versions prior to 5.2.149, update...

Acuant AcuFill SDK 安全漏洞

Acuant AcuFill SDK is a data capture technology from the American company Acuant. All major data fields can be extracted from documents. A security vulnerability exists in Acuant AcuFill SDK. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the...

Acuant AcuFill SDK 代码问题漏洞

Acuant AcuFill SDK is a data capture technology from the American company Acuant. All major data fields can be extracted from documents. A security vulnerability exists in Acuant AcuFill SDK versions prior to 10.22.02.03. An attacker can exploit the vulnerability to elevate privileges and execute...

Acuant AcuFill SDK 代码问题漏洞

Acuant AcuFill SDK is a data capture technology from the American company Acuant. All major data fields can be extracted from documents. A security vulnerability exists in Acuant AcuFill SDK that stems from the Acuant installer calling certutil.exe to install a certificate during SDK installation...

PT-2023-15624 · Acuant +1 · Acuant Asureid Sentinel +1

Name of the Vulnerable Software and Affected Versions: Acuant AsureID Sentinel versions prior to 5.2.149 Description: An issue was discovered that allows elevation of privileges because it opens Notepad after the installation of AssureID, Identify x64, and Identify x86. Recommendations: For...

CVE-2022-48227

Acuant AsureID Sentinel prior to 5.2.149 contains a local privilege escalation vulnerability (CORE-7361): it opens Notepad after installing AssureID, Identify x64, and Identify x86. CVSSv3.1 base score 7.8 (HIGH) with LOCAL attack, LOW privileges required, no user interaction. Affected: Acuant As...

CVE-2022-48228

An issue was discovered in Acuant AsureID Sentinel before 5.2.149. It uses the root of the C: drive for the i-Dentify and Sentinel Installer log files, aka CORE-7362...

CVE-2022-48221

An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. Multiple MSI's get executed out of a standard-user writable directory. Through a race condition and OpLock manipulation, these files can be overwritten by a standard user. They then get executed by the elevated installer. This give...