| Title | European Chemicals Agency (ECHA) IUCLID 6 - Desktop installer version for Windows 7.10.3 Insecure Permissions (CWE-276) |
|---|
| Description | European Chemicals Agency IUCLID 6 version 7.10.3 is prone to insecure permissions on its default installation path, wrongly allowing some files to be modified by unprivileged users, malicious process and/or threat actor.
Attacker can exploit the weakness abusing the "write" permission of the main application available to all users on the system or (in case of shared environment) network.
This issue affects the Desktop installer version for Windows. |
|---|
| Source | ⚠️ https://imagebin.ca/v/7nx8zv3l62Kf |
|---|
| User | acme (UID 61097) |
|---|
| Submission | 01/12/2024 17:25 (3 years ago) |
|---|
| Moderation | 01/21/2024 10:07 (9 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 251670 [European Chemicals Agency IUCLID 7.10.3 on Windows Desktop Installer iuclid6.exe default permission] |
|---|
| Points | 20 |
|---|