Approved changes feed: RSS · Atom
cpe:2.3:a:paloaltonetworks:secdo:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Paloaltonetworks (3967839f-3a57-5145-af08-e62a2a06ae6a) |
|---|---|
| Product | Secdo (c2f988a4-b549-5e42-b581-3da5c28ef644) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-1986 |
vulnerable | 2026-06-08 05:21:03.881478 |
Secdo: Local authenticated users can cause Windows system crash
MEDIUM (5.5)
Improper input validation vulnerability in Secdo allows an authenticated local user with 'create folders or append data' access to the root of the OS disk (C:\) to cause a system crash on every login. This issue affects all versions Secdo for Windows.
Published: 2020-04-08T18:41:58.340Z
Updated: 2024-09-16T20:26:16.271Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1985 |
vulnerable | 2026-06-08 05:21:03.881039 |
Secdo: Incorrect Default Permissions
HIGH (7.8)
Incorrect Default Permissions on C:\Programdata\Secdo\Logs folder in Secdo allows local authenticated users to overwrite system files and gain escalated privileges. This issue affects all versions Secdo for Windows.
Published: 2020-04-08T18:41:58.303Z
Updated: 2024-09-16T18:28:43.796Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1984 |
vulnerable | 2026-06-08 05:21:03.880462 |
Secdo: Privilege escalation via hardcoded script path
HIGH (7.8)
Secdo tries to execute a script at a hardcoded path if present, which allows a local authenticated user with 'create folders or append data' access to the root of the OS disk (C:\) to gain system privileges if the path does not already exist or is writable. This issue affects all versions of Secdo for Windows.
Published: 2020-04-08T18:41:58.264Z
Updated: 2024-09-17T04:20:08.232Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.