PT-2022-8391 · Verint · Verint Desktop Resources

Brian Wiltse · Published 2022-10-20 · Updated 2022-10-21 · CVE-2020-12744

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Verint Desktop Resources version 15.2

Description The issue allows an unprivileged local user to elevate their privileges during the installation or repair process of the software.

Recommendations For Verint Desktop Resources version 15.2, consider restricting access to the installation or repair process until a fix is available. As a temporary workaround, limit the privileges of users who can perform these actions to minimize the risk of exploitation.

Exploit

Fix

Improper Preservation of Permissions

Weakness Enumeration

CWE-281

Related Identifiers

CVE-2020-12744

Affected Products

Verint Desktop Resources

References · 5

• 🔥 https://github.com/bwiltse/cve/blob/master/Verint/Verint-CVE-2020-12744.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-12744 · Security Note
• https://osv.dev/vulnerability/CVE-2020-12744 · Vendor Advisory
• ❌ https://github.com/bwiltse/verint · Note, Deleted
• https://t.me/cibsecurity/51864 · Telegram Post