CVE-2019-16861

Code42 server through 7.0.2 for Windows has an Untrusted Search Path

published November 19, 2019

CVSS
—
EPSS
0%
Percentile
30.9
In the wild
Unconfirmed
What it is

Code42 server through 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attacker on the local server could create or modify a dynamic-link library (DLL). The Code42 service could then load it at runtime, and potentially execute arbitrary code at an elevated privilege on the local server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00381 · 30.9th percentile
Published
2019-11-19T12:50Z
EPSS history
Timeline
  • 19 NOV 12:50Z
    Code42 server through 7.0.2 for Windows has an Untrusted Search Path
    cvelistv5