Not rated
CVE-2021-22682 Cscape (All versions prior to 9.90 SP4) is configured by default to be installed for all users, which allows full…
Description
Cscape (All versions prior to 9.90 SP4) is configured by default to be installed for all users, which allows full permissions, including read/write access. This may allow unprivileged users to modify the binaries and configuration files and lead to local privilege escalation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cscape | Versions not published |
References
- us-cert.cisa.gov us-cert.cisa.gov
Timeline
- Published
- Last modified
Other CVEs of Cscape
The 7 CVEs of Cscape →
CVE-2021-33015
Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files
Not rated
CVE-2021-32975
Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files
Not rated
CVE-2021-32995
Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files
Not rated
CVE-2021-22678
Cscape (All versions prior to 9.90 SP4) lacks proper validation of user-supplied data when parsing project files
Not rated