Security Advisory

CVE-2019-16896

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-12-27 15:27:13

Last updated 2024-08-05 01:24:47

Assigner mitre

State PUBLISHED

Description

In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll (aka the backup module) improperly validates the administrative privileges of the user, allowing an arbitrary file write via a symbolic link attack with file restoration functionality.

← Browse all CVEs View on cve.org ↗