high7.8
CVE-2023-29838
Insecure Permission vulnerability found in Botkind/Siber Systems SyncApp v.19.0.3.0 allows a local attacker toe escalate privileges via the SyncService.exe fil…
Impact
Insecure Permission vulnerability found in Botkind/Siber Systems SyncApp v.19.0.3.0 allows a local attacker toe escalate privileges via the SyncService.exe file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Allwaysync | Allwaysync | Version 19.0.3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/IthacaLabs/Botkind/blob/main/Botkind_SyncApp/WeakServicePermissions_InsecureServiceExecutable_CVE-2023-29838.txt
- https://github.com/IthacaLabs/Botkind/tree/main/Botkind_SyncApp
- https://github.com/IthacaLabs/Botkind/blob/main/Botkind_SyncApp/WeakServicePermissions_InsecureServiceExecutable_CVE-2023-29838.txt
- https://github.com/IthacaLabs/Botkind/tree/main/Botkind_SyncApp