Vulnerabilities > Pearson > VUE Testing System

DATE CVE VULNERABILITY TITLE RISK
2021-01-04 CVE-2020-36154 Incorrect Permission Assignment for Critical Resource vulnerability in Pearson VUE Testing System 2.3.1911
The Application Wrapper in Pearson VUE VTS Installer 2.3.1911 has Full Control permissions for Everyone in the "%SYSTEMDRIVE%\Pearson VUE" directory, which allows local users to obtain administrative privileges via a Trojan horse application.
local
low complexity
pearson CWE-732
7.8