411 matches found
CVE-2022-23456
Potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software...
Arbitrary file deletion
Potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software...
CVE-2022-23456
Potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software...
CVE-2022-23456
CVE-2022-23456 relates to HP Support Assistant and is described in multiple sources as a potential arbitrary file deletion vulnerability. The connected Red Hat/EU ENISA/Nessus entries corroborate the issue title but do not introduce new technical details beyond what HP documents state. The HP adv...
PT-2022-15999
Name of the Vulnerable Software and Affected Versions HP Support Assistant affected versions not specified Description A potential arbitrary file deletion issue has been identified. Recommendations At the moment, there is no information about a newer version that contains a fix for this...
CVE-2022-23456: Undefined Security Weakness
Potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software...
Multiple vulnerabilities in HP Support Assistant
Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files. HP strives to address all security issues with HP...
HPSBGN03722 rev. 1 - HP Support Assistant Weak ACL and DLL Loading Vulnerability
Potential Security Impact Execution of arbitrary code. Source: HP, HP Product Security Response Team PSRT Reported by: Rémi ESCOURROU @remiescourrou VULNERABILITY SUMMARY A weak ACL may potentially allow an unauthorized person to load arbitrary code. RESOLUTION A patch was released on March 10,...
The vulnerability of the device driver update application, Intel Driver and Support Assistant, arises due to synchronization errors when using a shared resource, allowing an attacker to cause a service failure.
The vulnerability of the device driver update application, Intel Driver and Support Assistant, arises due to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to cause service failure...
Intel Driver Support Assistant Default Configuration Issue Vulnerability
Intel Driver & Support Assistant is an Intel driver and support management tool from Intel Corporation USA. This tool is mainly used to get the latest applications provided by Intel. A default configuration issue vulnerability exists in Incorrect default permissions in IntelR DSA versions prior t...
PT-2020-15469
Name of the Vulnerable Software and Affected Versions Intel Support Assistant affected versions not specified Description The issue concerns a privilege escalation exposure in the Intel Support Assistant, affecting local Windows machines. Recommendations At the moment, there is no information abo...
The vulnerability of the Intel Driver & Support Assistant software lies in its susceptibility to insecure privilege management, allowing attackers to escalate their privileges.
The vulnerability of the Intel Driver & Support Assistant software for updating drivers is related to insecure handling of privileges. Exploiting this vulnerability can allow a hacker to enhance their own privileges...
CVE-2020-12302
Improper permissions in the IntelR Driver & Support Assistant before version 20.7.26.7 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-12302
Improper permissions in the IntelR Driver & Support Assistant before version 20.7.26.7 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-12302
The Intel Driver & Support Assistant is affected by CVE-2020-12302. Description: improper permissions may allow an authenticated user to potentially escalate privileges via local access on versions before 20.7.26.7. Affected product: Intel® Driver & Support Assistant prior to 20.7.26.7. Reported ...
CVE-2020-12302: Incorrect Permission Assignment for Critical Resource
Improper permissions in the IntelR Driver & Support Assistant before version 20.7.26.7 may allow an authenticated user to potentially enable escalation of privilege via local access...
PT-2020-4265
Name of the Vulnerable Software and Affected Versions: IntelR Driver & Support Assistant versions prior to 20.7.26.7 Description: The issue is related to improper permissions in the IntelR Driver & Support Assistant, which may allow an authenticated user to potentially enable escalation of...
CVE-2020-11474
NCP Secure Enterprise Client before 10.15 r47589 allows a symbolic link attack on enumusb.reg via Support Assistant...