CVE-2024-7326CWE-427

IObit DualSafe Password Manager BPL RTL120.BPL uncontrolled search path

High · published July 31, 2024

CVSS v4.0
8.5
EPSS
0%
Percentile
24.5
In the wild
Unconfirmed
What it is

A vulnerability classified as critical has been found in IObit DualSafe Password Manager 1.4.0.3. This affects an unknown part in the library RTL120.BPL of the component BPL Handler. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The identifier VDB-273249 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00327 · 24.5th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2024-07-31T20:31Z
EPSS history
Timeline
  • 31 JUL 20:31Z
    IObit DualSafe Password Manager BPL RTL120.BPL uncontrolled search path
    cvelistv5