high7.5
CVE-2021-41066
An issue was discovered in Listary through 6.
Impact
An issue was discovered in Listary through 6. When Listary is configured as admin, Listary will not ask for permissions again if a user tries to access files on the system from Listary itself (it will bypass UAC protection; there is no privilege validation of the current user that runs via Listary).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bopsoft | Listary | through 6 |
Weakness classification
References
- NVD record
- CVE.org record
- https://medium.com/%40tomerp_77017/exploiting-listary-searching-your-way-to-system-privileges-8175af676c3e
- https://www.listary.com/download
- https://medium.com/%40tomerp_77017/exploiting-listary-searching-your-way-to-system-privileges-8175af676c3e
- https://www.listary.com/download