Link following in Comodo Internet Security - #VU95552
Published: August 8, 2024
Vulnerability identifier: #VU95552
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-59
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to improper handling of symbolic links within the cmdagent executable. A local user can create a symbolic link to a critical file on the system and trick the application into deleting it.
Affected software
Comodo Internet Security
Remediation
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.