CVE-2020-1984 — Secdo: Privilege escalation via hardcoded script path
Secdo tries to execute a script at a hardcoded path if present, which allows a local authenticated user with 'create folders or append data' access to the root of the OS disk (C…
Published: 2020-04-08 · CVSS: 7.8 · CVSS 3.1
Secdo tries to execute a script at a hardcoded path if present, which allows a local authenticated user with 'create folders or append data' access to the root of the OS disk (C:\) to gain system privileges if the path does not already exist or is writable. This issue affects all versions of Secdo for Windows.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7