Approved changes feed: RSS · Atom
cpe:2.3:a:veyon:veyon:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Veyon (704167b0-67a4-5f1b-bb4c-c9d481d5baa5) |
|---|---|
| Product | Veyon (dc740528-685c-5f8f-bb77-9fca4271a930) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/veyon |
purl2cpe | 2026-06-01 10:15:47.509287 |
pkg:deb/ubuntu/veyon |
purl2cpe | 2026-06-01 10:15:47.509290 |
pkg:github/veyon/veyon |
purl2cpe | 2026-06-01 10:15:47.509293 |
pkg:rpm/opensuse/veyon |
purl2cpe | 2026-06-01 10:15:47.509295 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-15261 |
vulnerable | 2026-06-08 05:19:25.615426 |
Unquoted service path vulnerability on Veyon
HIGH (8)
On Windows the Veyon Service before version 4.4.2 contains an unquoted service path vulnerability, allowing locally authenticated users with administrative privileges to run malicious executables with LocalSystem privileges. Since Veyon users (both students and teachers) usually don't have administrative privileges, this vulnerability is only dangerous in anyway unsafe setups. The problem has been fixed in version 4.4.2. As a workaround, the exploitation of the vulnerability can be prevented by revoking administrative privileges from all potentially untrustworthy users.
Published: 2020-10-19T21:30:18.000Z
Updated: 2024-08-04T13:15:19.022Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.