Beveiligingsadvies

CVE-2023-4770

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-11-30 13:32:43
Laatst bijgewerkt 2024-08-02 07:37:59
Toegewezen door INCIBE
CVSS-score 6.5
Status PUBLISHED

Beschrijving

An uncontrolled search path element vulnerability has been found on 4D and 4D server Windows executables applications, affecting version 19 R8 100218. This vulnerability consists in a DLL hijacking by replacing x64 shfolder.dll in the installation path, causing an arbitrary code execution.