CVE-2020-25289

MEDIUM 5.5CVE-2020-25289 · Published 13/09/2020 · updated 17/06/2026

In short

CVE-2020-25289 is a MEDIUM (CVSS 5.5) vulnerability affecting secureline vpn (avast).
Chance of exploitation in the next 30 days (EPSS): 0.45%, higher than 39.1% of all vulnerabilities.
Fix: update to 5.6.4982.470 or later.

Package	Affected versions	Patched versions
secureline vpn avast	`< 5.6.4982.470`	`5.6.4982.470`

Description

The VPN service in AVAST SecureLine before 5.6.4982.470 allows local users to write to arbitrary files via an Object Manager symbolic link from the log directory (which has weak permissions).

References

zeifan.my/security/arbitrary%20file/eop/2020/07/21/avast-secureline-vpn-arb-file-eop.html · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free