PT-2023-29441 · 1E · 1E Client

Lockheed Martin · Publicado 2023-10-05 · Atualizado 2025-05-20 · CVE-2023-45159

Positive Technologies (AI Summary)

CVSS v3.1

8.4

Alta

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions 1E Client versions 8.1 through 9.0

Description The 1E Client installer can perform arbitrary file deletion on protected files. A non-privileged user could provide a symbolic link or Windows junction to point to a protected directory in the installer that the 1E Client would then clear on service startup.

Recommendations For version 8.1, use hotfix Q23097. For version 8.4, use hotfix Q23105. For version 9.0, use hotfix Q23115. For SaaS customers, use 1EClient version 23.7 plus hotfix Q23121. As a temporary workaround, consider disabling the use of symbolic links or Windows junctions in the installer until a hotfix is applied.

Correção

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

CVE-2023-45159

Produtos afetados

1E Client

Referências · 11

• https://twitter.com/CVEnew/status/1709881059658138020 · Publicação no Twitter
• https://t.me/cibsecurity/71659 · Publicação no Telegram
• https://t.me/cvenotify/59035 · Publicação no Telegram
• https://t.me/cvenotify/59730 · Publicação no Telegram
• https://t.me/cvenotify/123034 · Publicação no Telegram
• https://t.me/cvenotify/59595 · Publicação no Telegram
• https://1e.com/trust-security-compliance/cve-info · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1709911114857742830 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-45159 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-45159 · Aviso do Fabricante
• https://teamviewer.com/en/resources/trust-center/security-bulletins/1e-2023-2001 · Nota