CWE Code: 426
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Untrusted Search Path
Summary: code42 server through 7.0.2 for windows has an untrusted search path. in certain situations, a non-administrative attacker on the local server could create or modify a dynamic-link library (dll). the code42 service could then load it at runtime, and potentially execute arbitrary code at an elevated privilege on the local server.
Access Authentication: NONE
Access Complexity: UNKNOWN
Access Vector: UNKNOWN
Impact (C/I/A): NONE/NONE/NONE
Published Date: 2019-11-19
Last Modified Date: 2019-11-19