Arbitrary Code Execution Vulnerability in Veritas APTARE for Windows

CVE-2020-36161

What is CVE-2020-36161?

A vulnerability in Veritas APTARE allows low-privileged users on Windows systems to create directories in critical configuration file locations. When the system is restarted, an attacker can exploit this access with a malicious OpenSSL engine, achieving arbitrary code execution with SYSTEM privileges. This escalation grants the attacker full administrator access, enabling them to manipulate installed applications and potentially access sensitive data across the system.

References