ID:10654 - Exploit for Permissions, Privileges, and Access Controls in File Replication Pro - CVE-2023-26918

 
Main Vulnerability Database Exploits ID:10654 - Exploit for Permissions, Privileges, and Access Controls in File Replication Pro - CVE-2023-26918

ID:10654 - Exploit for Permissions, Privileges, and Access Controls in File Replication Pro - CVE-2023-26918

Published: October 25, 2024


Vulnerability identifier: #VU75383
Vulnerability risk: Low
CVE-ID: CVE-2023-26918
CWE-ID: CWE-264
Exploitation vector: Local access
Vulnerable software:
File Replication Pro

Link to public exploit:


Vulnerability description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to insecure directory permissions. A local user can replace a legitimate file with a Trojan horse, which leads to security restrictions bypass and privilege escalation.


Remediation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.