| Package | Affected versions | Patched versions |
|---|---|---|
| passage drive | ≥ 1.4.0, ≤ 1.5.1.0 | |
| passage drive for box | = 1.0.0 |
Passage Drive versions v1.4.0 to v1.5.1.0 and Passage Drive for Box version v1.0.0 contain an insufficient data verification vulnerability for interprocess communication. By running a malicious program, an arbitrary OS command may be executed with LocalSystem privilege of the Windows system where the product is running.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free