Description (CNA)
Secdo tries to execute a script at a hardcoded path if present, which allows a local authenticated user with 'create folders or append data' access to the root of the OS disk (C:\) to gain system privileges if the path does not already exist or is writable. This issue affects all versions of Secdo for Windows.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Secdo / Secdo | affected all versions |
CWE
CWE-73
References
ADP enrichment
No English description supplied.