CPE Details
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:idrive:idrive:6.7.3.11:*:*:*:*:*:*:*
Informations
Vendor
idriveProduct
idriveVersion
6.7.3.11Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| IDrive before 6.7.3.19 on Windows installs by default to %PROGRAMFILES(X86)%\IDriveWindows with weak folder permissions granting any user modify permission (i.e., NT AUTHORITY\Authenticated Users:(OI)(CI)(M)) to the contents of the directory and its sub-folders. In addition, the program installs a service called IDriveService that runs as LocalSystem. Thus, any standard user can escalate privileges to NT AUTHORITY\SYSTEM by substituting the service's binary with a malicious one. | 7.8 |
Haute |
2025©
tesweb SA
