CVE-2020-16268

概要

参考情報

• help.1e.com/display/GI/1E+Security+Advisory-1E+Client+for+Windows%3A+CVE-2020-16268%2C+CVE-2020-27643%2C+CVE-2020-27644%2C+CVE-2020-27645 · Vendor Advisory

client のその他の脆弱性

• CVE-2023-45160高 8.8In the affected version of the 1E Client, an ordinary user could subvert downloaded instruction resource files, e.g., to substitute a harmfu…
• CVE-2023-45159高 8.41E Client installer can perform arbitrary file deletion on protected files.   A non-privileged user could provide a symbolic link or Window…
• CVE-2020-27645高 8.8The Inventory module of the 1E Client 5.0.0.745 doesn't handle an unquoted path when executing %PROGRAMFILES%\1E\Client\Tachyon.Performance.…
• CVE-2020-27644高 8.8The Inventory module of the 1E Client 5.0.0.745 doesn't handle an unquoted path when executing %PROGRAMFILES%\1E\Client\Tachyon.Performance.…
• CVE-2020-27643中 6.5The %PROGRAMDATA%\1E\Client directory in 1E Client 5.0.0.745 and 4.1.0.267 allows remote authenticated users and local users to create and m…