CVE-2019-18895 - Scanguard through 2019-11-12 on Windows has Insecure Permissions for the installation directory, leading to privilege escalation via a Trojan horse executable file

Back Back to CVE browser

HIGH

Scanguard through 2019-11-12 on Windows has Insecure Permissions for the installation directory, leading to privilege escalation via a Trojan horse executable file

Published Nov 14, 2019

7.8

HIGH

CVSS 3.1

EPSS 0.52%

Description

Scanguard through 2019-11-12 on Windows has Insecure Permissions for the installation directory, leading to privilege escalation via a Trojan horse executable file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-732

Incorrect Permission Assignment

References (4)

http://hyp3rlinx.altervista.org
x_refsource_MISCExploitThird Party Advisory
http://seclists.org/fulldisclosure/2019/Nov/5
mailing-listx_refsource_FULLDISCThird Party Advisory
https://packetstormsecurity.com/files/155319/ScanGuard-Antivirus-Insecure-Permissions.html
x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://support.scanguard.com/en/kb/22/upgrades-available
x_refsource_MISCProduct

Link	Providers	Tags
http://hyp3rlinx.altervista.org		x_refsource_MISCExploitThird Party Advisory
http://seclists.org/fulldisclosure/2019/Nov/5		mailing-listx_refsource_FULLDISCThird Party Advisory
https://packetstormsecurity.com/files/155319/ScanGuard-Antivirus-Insecure-Permissions.html		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://support.scanguard.com/en/kb/22/upgrades-available		x_refsource_MISCProduct