Local Privilege Escalation in IOBit Advanced SystemCare
CVE-2020-14990

7.1HIGH

Key Information:

Vendor

Iobit

Status
Advanced Systemcare
Vendor
CVE Published:
22 June 2020

What is CVE-2020-14990?

A vulnerability in IOBit Advanced SystemCare Free 13.5.0.263 allows local users to exploit the Clean & Optimize feature. By manipulating NTFS junctions and using Object Manager symbolic links, an attacker can gain unauthorized privileges to delete files on the system. This can lead to data loss and the potential compromise of system integrity.

References

https://daniels-it-blog.blogspot.com/2020/06/arbitrary-fi...
x_refsource_MISC
https://github.com/Daniel-itsec/AdvancedSystemCare
x_refsource_MISC

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.