CVE-2018-15809 AccuPOS 2017.8 is installed with the insecure "Authenticated Users: Modify" permission for files within the installation path. This may allow local attackers to compromise the integrity of critical re...
MediumCVSS 5.5
EPSS 0.24%
- Published
- Updated
- Exploit status
- No public exploit known
Description
AccuPOS 2017.8 is installed with the insecure "Authenticated Users: Modify" permission for files within the installation path. This may allow local attackers to compromise the integrity of critical resource and executable files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| accupos | = 2017.8 | No fix listed |
References
- versprite.com third-party-advisory