Description (CNA)
The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions Leading to Privilege Escalation’ vulnerability, which enables any logged-in non-administrative user to overwrite or replace the executable file with a malicious binary.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| HCLSoftware / DFMPro for CATIA | affected v4.1 |
| HCLSoftware / DFXAnalytics | affected v3.1 |
| HCLSoftware / DFXServer | affected v3.1 |
CWE
CWE-732
References
ADP enrichment
No English description supplied.
No references supplied.