VYPR

Gestionale Open

by Gestionale Open

CVEs (1)

  • CVE-2021-37363HigOct 26, 2021
    risk 0.51cvss 7.8epss 0.02

    An Insecure Permissions issue exists in Gestionale Open 11.00.00. A low privilege account is able to rename the mysqld.exe file located in bin folder and replace with a malicious file that would connect back to an attacking computer giving system level privileges (nt…