CVEvulnerability

CVE-2025-67794

6.1 MEDIUM Published 2025-12-17 Modified 2026-10-13 Official page ↗
Status
Modified
Published
2025-12-17
Last modified
2026-10-13
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
8.4 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-732

Description

An issue was discovered in DriveLock 24.1 through 24.1.*, 24.2 before 24.2.8, and 25.1 before 25.1.6. Directories and files created by the agent are created with overly permissive ACLs, allowing local users without administrator rights to trigger actions or destabilize the agent.

Affected configurations

• drivelock drivelock (>= 24.1 <= 24.1.4) • drivelock drivelock (>= 24.2 < 24.2.8) • drivelock drivelock (>= 25.1 < 25.1.6)

Related

Weakness · CWE (1)

  • CWE-732 Incorrect Permission Assignment for Critical Resource weakness

References