Description (CNA)
Bandisoft Bandizip before 7.47 fails to propagate Mark-of-the-Web to extracted .ps1 and .psm1 files, allowing attackers to bypass zone-based execution protections. Attackers can deliver unsigned PowerShell scripts or modules in downloaded archives that run under the RemoteSigned policy when the user invokes them.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Bandisoft / Bandizip | affected 0 before 7.47 |
CWE
CWE-693
References
- https://en.bandisoft.com/bandizip/history/
- https://www.vulncheck.com/advisories/bandisoft-bandizip-before-7.47-mark-of-the-web-bypass-for-powershell-scripts
ADP enrichment
No English description supplied.
No references supplied.