Code42 app through version 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attacker on the local machine could create or modify a dynamic-link library (DLL). The Code42 service could then load it at runtime, and potentially execute arbitrary code at an elevated privilege on the local machine.
References
Configurations
Configuration 1 (hide)
AND |
|
History
No history.
Information
Published : 2019-11-19 13:15
Updated : 2024-02-28 17:28
NVD link : CVE-2019-16860
Mitre link : CVE-2019-16860
CVE.ORG link : CVE-2019-16860
JSON object : View
Products Affected
code42
- code42
microsoft
- windows
CWE
CWE-426
Untrusted Search Path