CVE-2020-15401 — MEDIUM (4.4)

Vulnerability Description

IOBit Malware Fighter Pro 8.0.2.547 allows local users to gain privileges for file deletion by manipulating malicious flagged file locations with an NTFS junction and an Object Manager symbolic link.

CVSS Score

4.4

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

HIGH

Availability

NONE

Affected Products

Vendor	Product	Versions
Iobit	Malware Fighter	8.0.2.547

Related Weaknesses (CWE)

CWE-59

References

http://daniels-it-blog.blogspot.com/2020/06/when-your-anti-virus-turns-against-yExploitThird Party Advisory
http://daniels-it-blog.blogspot.com/2020/06/when-your-anti-virus-turns-against-yExploitThird Party Advisory

FAQ

What is CVE-2020-15401?

CVE-2020-15401 is a vulnerability with a CVSS score of 4.4 (MEDIUM). IOBit Malware Fighter Pro 8.0.2.547 allows local users to gain privileges for file deletion by manipulating malicious flagged file locations with an NTFS junction and an Object Manager symbolic link.

How severe is CVE-2020-15401?

CVE-2020-15401 has been rated MEDIUM with a CVSS base score of 4.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-15401?

Check the references section above for vendor advisories and patch information. Affected products include: Iobit Malware Fighter.