NetSight
high8.8

CVE-2022-36563

Incorrect access control in the install directory (C:\RailsInstaller) of Rubyinstaller2 v3.1.2 and below allows authenticated attackers to execute arbitrary co…

Impact

Incorrect access control in the install directory (C:\RailsInstaller) of Rubyinstaller2 v3.1.2 and below allows authenticated attackers to execute arbitrary code via overwriting binaries located in the directory.

Affected products

VendorProductAffected versions
RubyinstallerRubyinstaller2
through 3.1.2

References