PT-2014-8515 · Wibu Systems · Codemeter Runtime

Published 2014-11-26 · Updated 2018-10-09 · CVE-2014-8419

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Wibu-Systems CodeMeter Runtime versions prior to 5.20

Description The issue concerns weak permissions set for the codemeter.exe file, allowing all users to have read and write access. This weakness can be exploited by local users to gain privileges through the use of a Trojan horse file.

Recommendations For versions prior to 5.20, update to version 5.20 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-8419

Affected Products

Codemeter Runtime

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-8419 · Security Note
• http://securityfocus.com/archive/1/534079/100/0/threaded · Note
• http://packetstormsecurity.com/files/129234/CodeMeter-Weak-Service-Permissions.html · Note