CVE-2024-54910

Hasleo Backup Suite Free v4.9.4 and before is vulnerable to Insecure Permissions via the File recovery function...

CVE-2024-54910

creationtimestamp| type| source ---|---|--- 2025-01-10 18:36:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113805505863425025 2025-01-10 19:16:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lffvqfxyza22 2025-01-10 19:34:14+00:00| seen|...

CVE-2024-54910

Hasleo Backup Suite Free v4.9.4 and before is vulnerable to Insecure Permissions via the File recovery function...

CVE-2024-54910

Hasleo Backup Suite Free (version 4.9.4 and before ) is vulnerable to Insecure Permissions within the File recovery function. This flaw allows a low-privileged user to perform arbitrary file writes by creating a symbolic link in a directory they control (e.g., C:/) and then using the recovery too...