CVE-2021-30359CWE-427

The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the installation

published October 22, 2021

CVSS
—
EPSS
4%
Percentile
90.3
In the wild
Unconfirmed
What it is

The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the installation. Because the MS Installer allows regular users to repair their installation, an attacker running an installer before 90.08.7405 can start the installation repair and place a specially crafted binary in the repair folder, which runs with the admin privileges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03930 · 90.3th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2021-10-22T13:32Z
EPSS history
Timeline
  • 22 OCT 13:32Z
    The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the installation
    cvelistv5