Code42 app through version 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attacker on the local machine could create or modify a dynamic-link library (DLL). The Code42 service could then load it at runtime, and potentially execute arbitrary code at an elevated privilege on the local machine.
References
Configurations
Configuration 1 (hide)
AND |
|
History
No history.
Information
Published : 2019-11-19 13:15
Updated : 2023-12-10 13:13
NVD link : CVE-2019-16860
Mitre link : CVE-2019-16860
CVE.ORG link : CVE-2019-16860
JSON object : View
Products Affected
microsoft
- windows
code42
- code42
CWE
CWE-426
Untrusted Search Path