CVE-2018-20146

HIGH 7.8CVE-2018-20146 · Published 21/02/2019 · updated 17/06/2026

In short

CVE-2018-20146 is a HIGH (CVSS 7.8) vulnerability affecting flexapp (liquidware), profileunity (liquidware).
Chance of exploitation in the next 30 days (EPSS): 0.43%, higher than 37.3% of all vulnerabilities.
Fix: update to 6.8.0 or later.

Package	Affected versions	Patched versions
flexapp liquidware	`< 6.8.0`	`6.8.0`
profileunity liquidware	`< 6.8.0`	`6.8.0`

Description

An issue was discovered in Liquidware ProfileUnity before 6.8.0 with Liquidware FlexApp before 6.8.0. A local user could obtain administrator rights, as demonstrated by use of PowerShell.

References

liquidware.com/content/pdf/documents/support/Liquidware-ProfileUnity-Release-Notes.pdf · Release Notes

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free