Vulnerabilities > Paloaltonetworks > Secdo > High
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2020-04-08 | CVE-2020-1985 | Incorrect Default Permissions vulnerability in Paloaltonetworks Secdo Incorrect Default Permissions on C:\Programdata\Secdo\Logs folder in Secdo allows local authenticated users to overwrite system files and gain escalated privileges. | 7.8 |
2020-04-08 | CVE-2020-1984 | Improper Input Validation vulnerability in Paloaltonetworks Secdo Secdo tries to execute a script at a hardcoded path if present, which allows a local authenticated user with 'create folders or append data' access to the root of the OS disk (C:\) to gain system privileges if the path does not already exist or is writable. | 7.8 |