CWE Code: 428
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Unquoted Search Path or Element
Summary: an unquoted search path or element issue was discovered in automated logic corporation (alc) alc webctrl, i-vu, sitescan web 6.5 and prior; alc webctrl, sitescan web 6.1 and prior; alc webctrl, i-vu 6.0 and prior; alc webctrl, i-vu, sitescan web 5.5 and prior; and alc webctrl, i-vu, sitescan web 5.2 and prior. an unquoted search path vulnerability may allow a non-privileged local attacker to change files in the installation directory and execute arbitrary code with elevated privileges.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2017-08-25
Last Modified Date: 2019-10-09