Description (CNA)
I2P before 0.9.46 allows local users to gain privileges via a Trojan horse I2PSvc.exe file because of weak permissions on a certain %PROGRAMFILES% subdirectory.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://geti2p.net/en
- https://blog.blazeinfosec.com/security-advisory-i2p-for-windows-local-privilege-escalation/
ADP enrichment
No English description supplied.