Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:39956
HistoryMar 25, 2023 - 2:08 a.m.

Privilege Escalation

2023-03-2502:08:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
18
cloudflared
vulnerability
privilege escalation
msi installer
windows
system files

EPSS

0

Percentile

5.1%

github.com/cloudflare/cloudflared is vulnerable to Privilege Escalation. A local attacker with no administrative permissions may use symbolic links to manipulate the MSI installer’s repair functionality to delete important system files or replace them with malicious files, potentially leading to the device being compromised. Please note that this vulnerability only affects 32 bit Windows devices.

EPSS

0

Percentile

5.1%

Related for VERACODE:39956