CVE-2021-45492

creationtimestamp| type| source ---|---|--- 2022-07-14 20:32:54+00:00| seen| https://t.me/cibsecurity/46266...

CVE-2021-45492

CVE-2021-45492 affects Sage 300 ERP (through 6.8.x). The installer places C:\Sage\Sage300\Runtime at the front of the system PATH, and this directory is writable by unprivileged users due to weak C:\ permissions inherited by the installer. Because PATH entries are used for DLL search order, an at...