CVEvulnerability
CVE-2020-12463
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-05-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Description
An elevation of privilege vulnerability exists in Avira Software Updater before 2.0.6.27476 due to improperly handling file hard links. This allows local users to obtain take control of arbitrary files.
Affected configurations
• avira software updater (< 2.0.6.27476)
References
- https://support.avira.com/hc/en-us/articles/360000142857-Avira-Software-Updater Release Notes, Vendor Advisory
- https://support.avira.com/hc/en-us/articles/360000142857-Avira-Software-Updater Release Notes, Vendor Advisory