CVEvulnerability

CVE-2020-11446

7.8 HIGH Published 2020-04-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-04-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-59

Description

ESET Antivirus and Antispyware Module module 1553 through 1560 allows a user with limited access rights to create hard links in some ESET directories and then force the product to write through these links into files that would normally not be write-able by the user, thus achieving privilege escalation.

Affected configurations

• eset antivirus and antispyware (>= 1553 <= 1560) • eset endpoint antivirus • eset endpoint security • eset file security • eset internet security • eset mail security • eset nod32 antivirus • eset smart security

Related

Weakness · CWE (1)

  • CWE-59 Improper Link Resolution Before File Access weakness

References