CVE-2020-25289

The VPN service in AVAST SecureLine before 5.6.4982.470 allows local users to write to arbitrary files via an Object Manager symbolic link from the log…

published September 13, 2020

CVSS
—
EPSS
0%
Percentile
38.0
In the wild
Unconfirmed
What it is

The VPN service in AVAST SecureLine before 5.6.4982.470 allows local users to write to arbitrary files via an Object Manager symbolic link from the log directory (which has weak permissions).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00449 · 38.0th percentile
Published
2020-09-13T19:35Z
EPSS history
Timeline
  • 13 SEP 19:35Z
    The VPN service in AVAST SecureLine before 5.6.4982.470 allows local users to write to arbitrary files via an Object Manager symbolic link from the log…
    cvelistv5