Arbitrary Write Elevation of Privileges Vulnerability in G-Data

Arbitrary Write Elevation of Privileges Vulnerability in G-Data

CVE-2020-27172 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

An issue was discovered in G-Data before 25.5.9.25 using Symbolic links, it is possible to abuse the infected-file restore mechanism to achieve arbitrary write that leads to elevation of privileges.

Learn more about our Web Application Penetration Testing UK.