CVE-2020-13431

ALTO 7.8CVE-2020-13431 · Published 16/06/2020 · updated 17/06/2026

In breve

CVE-2020-13431 è una vulnerabilità ALTO (CVSS 7.8) che riguarda i2p (geti2p).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.31%, superiore al 23.9% delle vulnerabilità.
Correzione: aggiornare a 0.9.46 o successiva.

Package	Affected versions	Patched versions
i2p geti2p	`< 0.9.46`	`0.9.46`

Description

I2P before 0.9.46 allows local users to gain privileges via a Trojan horse I2PSvc.exe file because of weak permissions on a certain %PROGRAMFILES% subdirectory.

References

blog.blazeinfosec.com/security-advisory-i2p-for-windows-local-privilege-escalation · Technical Description
geti2p.net/en · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free