| Package | Affected versions | Patched versions |
|---|---|---|
| advanced malware protection | < 7.2.13 | 7.2.13 |
| madcodehook | < 4.1.3 | 4.1.3 |
| unified threat prevention platform | ≥ 4.0, < 4.1.2< 3.5.9 | 4.1.23.5.9 |
A TOCTOU vulnerability exists in madCodeHook before 2020-07-16 that allows local attackers to elevate their privileges to SYSTEM. This occurs because path redirection can occur via vectors involving directory junctions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free