CVE-2020-5755

Description

Webroot endpoint agents prior to version v9.0.28.48 did not protect the "%PROGRAMDATA%\WrData\PKG" directory against renaming. This could allow attackers to trigger a crash or wait upon Webroot service restart to rewrite and hijack dlls in this directory for privilege escalation.

References

https://www.tenable.com/security/research/tra-2020-36

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3