CWE Code: 275
Vulnerability Type: privilege_escalation
CVSS Score: 4.6
CWE Name:  Permission Issues
Summary: 3cx phone 15 on windows has insecure permissions on the "%programdata%\3cxphone for windows\phoneapp" installation directory, allowing full control access for everyone, and leading to privilege escalation because of a startup link.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-08-12
Last Modified Date: 2019-08-27