PowerAct Pro Master Agent for Windows fails to restrict acess permissions

Overview PowerAct Pro Master Agent for Windows provided by OMRON SOCIAL SOLUTIONS Co.,Ltd. fails to restrict access permissions. Hosono, Akane reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A user with an...

JVN#63981842: PowerAct Pro Master Agent for Windows fails to restrict acess permissions

PowerAct Pro Master Agent for Windows provided by OMRON SOCIAL SOLUTIONS Co.,Ltd. fails to restrict access permissions. Impact A user with an Windows general user acccount may alter or edit a file which the user does not have a permission to access. Solution Update the Software Update the softwar...

PT-2019-9271

Name of the Vulnerable Software and Affected Versions PowerAct Pro Master Agent for Windows versions 5.13 and earlier Description The issue allows authenticated attackers to bypass access restrictions, enabling them to alter or edit unauthorized files. The exact vectors used for this bypass are n...

CVE-2018-16207: Undefined Security Weakness

PowerAct Pro Master Agent for Windows Version 5.13 and earlier allows authenticated attackers to bypass access restriction to alter or edit unauthorized files via unspecified vectors...