Lucene search

K
vulnrichmentFlexeraVULNRICHMENT:CVE-2021-41526
HistoryMar 29, 2023 - 12:00 a.m.

CVE-2021-41526

2023-03-2900:00:00
flexera
github.com
4
cve-2021-41526
privilege escalation
windows installer
installscript custom action
vulnerability

AI Score

7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

A vulnerability has been reported in the windows installer (MSI) built with InstallScript custom action. This vulnerability may allow privilege escalation when invoked ‘repair’ of the MSI which has an InstallScript custom action.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:flexera:revenera_installshield:-:*:*:*:*:windows:*:*"
    ],
    "vendor": "flexera",
    "product": "revenera_installshield",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2021",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:flexera:revenera_installshield:2021:-:*:*:*:windows:*:*"
    ],
    "vendor": "flexera",
    "product": "revenera_installshield",
    "versions": [
      {
        "status": "affected",
        "version": "2021"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:flexera:revenera_installshield:2021:r1:*:*:*:windows:*:*"
    ],
    "vendor": "flexera",
    "product": "revenera_installshield",
    "versions": [
      {
        "status": "affected",
        "version": "2021"
      }
    ],
    "defaultStatus": "unknown"
  }
]

AI Score

7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

Related for VULNRICHMENT:CVE-2021-41526