Vulnerabilities > Paloaltonetworks > Secdo > High

DATE CVE VULNERABILITY TITLE RISK
2020-04-08 CVE-2020-1984 Improper Input Validation vulnerability in Paloaltonetworks Secdo
Secdo tries to execute a script at a hardcoded path if present, which allows a local authenticated user with 'create folders or append data' access to the root of the OS disk (C:\) to gain system privileges if the path does not already exist or is writable.
local
low complexity
paloaltonetworks CWE-20
7.2