Unrated severityNVD Advisory· Published Apr 8, 2020· Updated Sep 17, 2024
Secdo: Privilege escalation via hardcoded script path
CVE-2020-1984
Description
Secdo tries to execute a script at a hardcoded path if present, which allows a local authenticated user with 'create folders or append data' access to the root of the OS disk (C:\) to gain system privileges if the path does not already exist or is writable. This issue affects all versions of Secdo for Windows.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- security.paloaltonetworks.com/CVE-2020-1984mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.