PT-2020-14383

Name of the Vulnerable Software and Affected Versions IDrive versions prior to 6.7.3.19 Description The issue allows any standard user to escalate privileges to NT AUTHORITYSYSTEM by substituting the IDriveService binary with a malicious one due to weak folder permissions. The program installs by...

CVE-2020-15351: Incorrect Default Permissions

IDrive before 6.7.3.19 on Windows installs by default to %PROGRAMFILESX86%\IDriveWindows with weak folder permissions granting any user modify permission i.e., NT AUTHORITY\Authenticated Users:OICIM to the contents of the directory and its sub-folders. In addition, the program installs a service...