Vulnerability · Published Oct 19, 2020 · Assigned by GitHub_M
CVE-2020-15261Unquoted service path vulnerability on Veyon
High 8.0
In plain English
A high-severity security flaw in veyon from veyon. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 11.3% (higher than 96% of all known vulnerabilities).
Official description
On Windows the Veyon Service before version 4.4.2 contains an unquoted service path vulnerability, allowing locally authenticated users with administrative privileges to run malicious executables with LocalSystem privileges. Since Veyon users (both students and teachers) usually don't have administrative privileges, this vulnerability is only dangerous in anyway unsafe setups. The problem has been fixed in version 4.4.2. As a workaround, the exploitation of the vulnerability can be prevented by revoking administrative privileges from all potentially untrustworthy users.
Affected products (as reported)
Weakness: CWE-428 · Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
References
- https://github.com/veyon/veyon/security/advisories/GHSA-c8cc-x786-hqqp x_refsource_CONFIRM
- https://github.com/veyon/veyon/issues/657 x_refsource_MISC
- https://github.com/veyon/veyon/commit/f231ec511b9a09f43f49b2c7bb7c60b8046276b1 x_refsource_MISC
- http://packetstormsecurity.com/files/162873/Veyon-4.4.1-Unquoted-Service-Path.html x_refsource_MISC
- https://www.exploit-db.com/exploits/49925 x_refsource_MISC
- https://www.exploit-db.com/exploits/48246 x_refsource_MISC