CVE-2020-26155

2021-03-1816:17:01

mitre

www.cve.org

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.5%

JSON

Multiple files and folders in Utimaco SecurityServer 4.20.0.4 and 4.31.1.0. are installed with Read/Write permissions for authenticated users, which allows for binaries to be manipulated by non-administrator users. Additionally, entries are made to the PATH environment variable which, in conjunction with these weak permissions, could enable an attacker to perform a DLL hijacking attack.