CVEvulnerability

CVE-2020-25289

5.5 MEDIUM Published 2020-09-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-09-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-59

Description

The VPN service in AVAST SecureLine before 5.6.4982.470 allows local users to write to arbitrary files via an Object Manager symbolic link from the log directory (which has weak permissions).

Affected configurations

• avast secureline vpn (< 5.6.4982.470)

Related

Weakness · CWE (1)

  • CWE-59 Improper Link Resolution Before File Access weakness

References