Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2020-1984

Secdo: Privilege escalation via hardcoded script path

Description

Secdo tries to execute a script at a hardcoded path if present, which allows a local authenticated user with 'create folders or append data' access to the root of the OS disk (C:\) to gain system privileges if the path does not already exist or is writable. This issue affects all versions of Secdo for Windows.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Secdo Secdo

  • all versionsaffected

References