Macrium Reflect 7.2.x/7.3.x < 7.3.5281 Privilege Escalation

The version of Macrium Reflect installed on the remote Windows host is 7.2.x or 7.3.x prior to version 7.3.5281. It is, therefore, affected by a privilege escalation vulnerability related to the OpenSSL component. An unprivileged Windows user can exploit this, by creating the appropriate path to ...

Macrium Reflect is vulnerable to privilege escalation due to OPENSSLDIR location

Overview Macrium Reflect contains a privilege escalation vulnerability due to the use of an OPENSSLDIR variable that specifies a location where an unprivileged Windows user can create files. Description CVE-2020-10143 Macrium Reflect includes an OpenSSL component that specifies an OPENSSLDIR...