PT-2023-29441 · 1E · 1E Client

Name of the Vulnerable Software and Affected Versions: 1E Client versions 8.1 through 9.0 Description: The 1E Client installer can perform arbitrary file deletion on protected files. A non-privileged user could provide a symbolic link or Windows junction to point to a protected directory in the...

CVE-2023-32470

Dell Digital Delivery versions prior to 5.0.82.0 contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability to create arbitrary folder leading to permanent Denial of Service DOS...

PT-2020-12794

Name of the Vulnerable Software and Affected Versions ProVide formerly zFTPServer versions through 13.1 Description An issue was discovered where the software does not enforce permission over Windows Symlinks or Junctions. This allows a low-privileged user to craft a Junction Link in a directory...