CVE-2020-25289

2020-09-1319:35:21

mitre

www.cve.org

vpn service

avast secureline

vulnerability

object manager symbolic link

weak permissions

AI Score

5.5

Confidence

High

EPSS

Percentile

5.1%

JSON

The VPN service in AVAST SecureLine before 5.6.4982.470 allows local users to write to arbitrary files via an Object Manager symbolic link from the log directory (which has weak permissions).

References

zeifan.my/security/arbitrary%20file/eop/2020/07/21/avast-secureline-vpn-arb-file-eop.html