CVE-2020-1985CWE-276

Secdo: Incorrect Default Permissions

High · published April 8, 2020

CVSS v3.1
7.8
EPSS
0%
Percentile
16.4
In the wild
Unconfirmed
What it is

Incorrect Default Permissions on C:\Programdata\Secdo\Logs folder in Secdo allows local authenticated users to overwrite system files and gain escalated privileges. This issue affects all versions Secdo for Windows.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00257 · 16.4th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2020-04-08T18:41Z
EPSS history
Timeline
  • 08 APR 18:41Z
    Secdo: Incorrect Default Permissions
    cvelistv5