Acronis True Image 安全漏洞

Acronis True Image is a famous data backup and restore software from Acronis Singapore. The software can be used to create drive and disk images and can restore the image when a clean system is needed. Acronis True Image suffers from a security vulnerability that stems from insecure folder...

PT-2021-9798

Name of the Vulnerable Software and Affected Versions Acronis True Image for Mac versions prior to 2021 Update 4 Description The issue allows local privilege escalation due to insecure folder permissions. Recommendations For versions prior to 2021 Update 4, update to 2021 Update 4 or later to...

CVE-2020-15496: Improper Preservation of Permissions

Acronis True Image for Mac before 2021 Update 4 allowed local privilege escalation due to insecure folder permissions...

Local privilege escalation due to insecure folder permissions

...

Local privilege escalation due to insecure folder permissions

...

Design/Logic Flaw

On version 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1, the BIG-IP Edge Client Windows Installer Service's temporary folder has weak file and folder permissions. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2021-23022

CVE-2021-23022 affects the BIG-IP Edge Client for Windows: the Windows Installer Service temporary folder has weak permissions, enabling local privilege escalation. Affected versions are 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1; non-vulnerable/End of Technical Support versions are...

Denial of service due to insecure folder permissions

...

Local privilege escalation due to insecure folder permissions

...

Siemens SIMARIS configuration insecure folder permissions vulnerability

Siemens SIMARIS configuration supports the full digital engineering process when building distribution systems, from planning through costing and tender preparation to standards-compliant distribution system documentation. A security vulnerability exists in Siemens SIMARIS configuration. An...

CVE-2021-3394

Millennium Millewin also known as "Cartella clinica" 13.39.028, 13.39.28.3342, and 13.39.146.1 has insecure folder permissions allowing a malicious user for a local privilege escalation...

CVE-2021-3394

Millennium Millewin also known as "Cartella clinica" 13.39.028, 13.39.28.3342, and 13.39.146.1 has insecure folder permissions allowing a malicious user for a local privilege escalation...

CVE-2021-3394

Millennium Millewin also known as "Cartella clinica" 13.39.028, 13.39.28.3342, and 13.39.146.1 has insecure folder permissions allowing a malicious user for a local privilege escalation...

Privilege escalation

Millennium Millewin also known as "Cartella clinica" 13.39.028, 13.39.28.3342, and 13.39.146.1 has insecure folder permissions allowing a malicious user for a local privilege escalation...

CVE-2021-3394

Millennium Millewin also known as "Cartella clinica" 13.39.028, 13.39.28.3342, and 13.39.146.1 has insecure folder permissions allowing a malicious user for a local privilege escalation...

CVE-2021-3394

CVE-2021-3394 affects Millennium Millewin (Cartella clinica) versions 13.39.028, 13.39.28.3342 and 13.39.146.1. The issue is caused by insecure folder permissions, enabling a local attacker to escalate privileges, with the related risk class corroborated by unquoted service path conditions noted ...

CVE-2021-3394: Incorrect Default Permissions

Millennium Millewin also known as "Cartella clinica" 13.39.028, 13.39.28.3342, and 13.39.146.1 has insecure folder permissions allowing a malicious user for a local privilege escalation...

PT-2021-20365

Name of the Vulnerable Software and Affected Versions: Millennium Millewin versions 13.39.028, 13.39.28.3342, and 13.39.146.1 Description: The issue is related to insecure folder permissions in Millennium Millewin, allowing a malicious user to perform a local privilege escalation. Recommendations...

Millewin 13.39.146.1 - Local Privilege Escalation Vulnerability

Exploit Title: Millewin 13.39.146.1 - Local Privilege Escalation Author: Andrea Intilangelo Vendor Homepage: https://www.millewin.it Software Homepage: https://www.millewin.it/index.php/prodotti/millewin Software Link: https://download.millewin.it/files/Millewin/setup/InstMilleDemo13.392019PS.exe...

Remediation and Hardening Strategies for Microsoft 365 to Defend Against UNC2452

UPDATE Oct. 28, 2021: Mandiant has recently observed targeted threat actors using EWS impersonation via the ApplicationImpersonation role to maintain persistent access to mailboxes in victim environments. Once the threat actor has access to this role, its abuse is hard to detect and provides the...