PT-2023-29441 · 1E · 1E Client

Lockheed Martin · Published 2023-10-05 · Updated 2025-05-20 · CVE-2023-45159

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions 1E Client versions 8.1 through 9.0

Description The 1E Client installer can perform arbitrary file deletion on protected files. A non-privileged user could provide a symbolic link or Windows junction to point to a protected directory in the installer that the 1E Client would then clear on service startup.

Recommendations For version 8.1, use hotfix Q23097. For version 8.4, use hotfix Q23105. For version 9.0, use hotfix Q23115. For SaaS customers, use 1EClient version 23.7 plus hotfix Q23121. As a temporary workaround, consider disabling the use of symbolic links or Windows junctions in the installer until a hotfix is applied.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2023-45159

Affected Products

1E Client

References · 11

• https://1e.com/trust-security-compliance/cve-info · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-45159 · Security Note
• https://osv.dev/vulnerability/CVE-2023-45159 · Vendor Advisory
• https://twitter.com/CVEnew/status/1709881059658138020 · Twitter Post
• https://t.me/cibsecurity/71659 · Telegram Post
• https://t.me/cvenotify/59035 · Telegram Post
• https://t.me/cvenotify/59730 · Telegram Post
• https://t.me/cvenotify/123034 · Telegram Post
• https://t.me/cvenotify/59595 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1709911114857742830 · Twitter Post
• https://teamviewer.com/en/resources/trust-center/security-bulletins/1e-2023-2001 · Note