PT-2018-13221 · Accupos · Accupos

Published 2018-08-23 · Updated 2020-08-24 · CVE-2018-15809

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions AccuPOS version 2017.8

Description The issue concerns an insecure permission setting, specifically "Authenticated Users: Modify", applied to files within the installation path. This setting may enable local attackers to compromise the integrity of critical resource and executable files.

Recommendations For AccuPOS version 2017.8, consider changing the permission setting from "Authenticated Users: Modify" to a more restrictive setting to prevent local attackers from modifying critical files.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2018-15809

Affected Products

Accupos

References · 3

• https://osv.dev/vulnerability/CVE-2018-15809 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-15809 · Security Note
• https://versprite.com/advisories/accupos · Note