PT-2014-8515 · Wibu Systems · Codemeter Runtime

Publicado 2014-11-26 · Atualizado 2018-10-09 · CVE-2014-8419

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Wibu-Systems CodeMeter Runtime versions prior to 5.20

Description The issue concerns weak permissions set for the codemeter.exe file, allowing all users to have read and write access. This weakness can be exploited by local users to gain privileges through the use of a Trojan horse file.

Recommendations For versions prior to 5.20, update to version 5.20 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-8419

Produtos afetados

Codemeter Runtime

Referências · 3

• http://securityfocus.com/archive/1/534079/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-8419 · Nota de Segurança
• http://packetstormsecurity.com/files/129234/CodeMeter-Weak-Service-Permissions.html · Nota