The MSI installer in 1E Client 4.1.0.267 and 5.0.0.745 allows remote authenticated users and local users to gain elevated privileges via the repair option. This applies to installations that have a TRANSFORM (MST) with the option to disable the installation of the Nomad module. An attacker may craft a .reg file in a specific location that will be able to write to any registry key as an elevated user.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2020-12-29T20:07:00

Updated: 2024-08-04T13:37:54.237Z

Reserved: 2020-08-03T00:00:00

Link: CVE-2020-16268

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-12-29T21:15:13.087

Modified: 2024-11-21T05:07:03.937

Link: CVE-2020-16268

cve-icon Redhat

No data.