PT-2022-20240

Name of the Vulnerable Software and Affected Versions Acronis Snap Deploy Windows versions before build 3640 Description The issue is related to local privilege escalation due to insecure folder permissions. Recommendations For Acronis Snap Deploy Windows versions before build 3640, update to bui...

CVE-2022-30697

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Snap Deploy Windows before build 3640...

Local privilege escalation due to insecure folder permissions

...

CVE-2022-23139

ZTE's ZXMP M721 product has a permission and access control vulnerability. Since the folder permission viewed by sftp is 666, which is inconsistent with the actual permission. It’s easy for?users to?ignore the modification?of?the file permission configuration, so that low-authority accounts could...

ZTE ZXMP M721 权限许可和访问控制问题漏洞

The ZTE ZXMP M721 is a metro edge OTN Optical Transport Network device from ZTE Corporation ZTE in China.The ZTE ZXMP M721 has a privilege and access control vulnerability, which stems from the fact that the folder privilege viewed by sftp is 666, which is inconsistent with the actual privilege,...

CVE-2022-23743

Check Point ZoneAlarm before version 15.8.200.19118 allows a local actor to escalate privileges during the upgrade process. In addition, weak permissions in the ProgramData\CheckPoint\ZoneAlarm\Data\Updates directory allow a local attacker the ability to execute an arbitrary file write, leading t...

CVE-2020-10632

Inadequate folder security permissions in Emerson OpenEnterprise versions through 3.3.4 may allow modification of important configuration files, which could cause the system to fail or behave in an unpredictable manner...

CVE-2022-0483

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor Windows before build 53...

Privilege escalation

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor Windows before build 53...

CVE-2022-0483 Local privilege escalation due to insecure folder permissions

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor Windows before build 53...

CVE-2022-0483

CVE-2022-0483 affects Acronis VSS Doctor (Windows) prior to build 53. The vulnerability is a local privilege escalation caused by insecure folder permissions, allowing a low-privileged attacker to gain higher privileges on affected systems. The NVD entry confirms the local attack vector with a CV...

PT-2022-13207

Name of the Vulnerable Software and Affected Versions Acronis VSS Doctor Windows versions prior to build 53 Description The issue is related to local privilege escalation due to insecure folder permissions. Recommendations For versions prior to build 53, update to build 53 or later to resolve the...

CVE-2022-0483: Uncontrolled Search Path Element

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor Windows before build 53...

CVE-2022-0483

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor Windows before build 53...

Acronis VSS Doctor 代码问题漏洞

Acronis VSS Doctor is a diagnostic and repair tool from Acronis Singapore. It is available free of charge to help you quickly identify and effectively repair the most common Volume Shadow Copy Service problems. A security vulnerability exists in versions prior to Acronis VSS Doctor build 53 that...

Local privilege escalation due to insecure folder permissions

...

Fortinet FortiClient 安全漏洞

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. It provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A security vulnerability exists in Fortinet FortiClient, which can...

SolarWinds DameWare Mini Remote Control < 12.2 Arbitrary File Deletion

An arbitrary file deletion vulnerability exists in Dameware Mini Remote Control Service due to insecure folder permissions. An unauthenticated, remote attacker can exploit this by initiating a repair via the windows installer, to delete arbitrary files. Note that Nessus has not tested for this...

Gestionale Open 11.00.00 Privilege Escalation

Exploit Title: Gestionale Open 11.00.00 - Local Privilege Escalation Date: 2021-07-19 Author: Alessandro 'mindsflee' Salzano Vendor Homepage: https://www.gestionaleopen.org/ Software Homepage: https://www.gestionaleopen.org/ Software Link:...

Gestionale Open 11.00.00 - Local Privilege Escalation Vulnerability

Exploit Title: Gestionale Open 11.00.00 - Local Privilege Escalation Author: Alessandro 'mindsflee' Salzano Vendor Homepage: https://www.gestionaleopen.org/ Software Homepage: https://www.gestionaleopen.org/ Software Link:...