Vulnerability Description
SprintWork 2.3.1 contains multiple local privilege escalation vulnerabilities through insecure file, service, and folder permissions on Windows systems. Local unprivileged users can exploit missing executable files and weak service configurations to create a new administrative user and gain complete system access.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://veridium.net
- https://veridium.net/sprintwork/
- https://www.exploit-db.com/exploits/48070
- https://www.vulncheck.com/advisories/sprintwork-local-privilege-escalation
FAQ
What is CVE-2020-37160?
CVE-2020-37160 is a vulnerability with a CVSS score of 6.2 (MEDIUM). SprintWork 2.3.1 contains multiple local privilege escalation vulnerabilities through insecure file, service, and folder permissions on Windows systems. Local unprivileged users can exploit missing ex...
How severe is CVE-2020-37160?
CVE-2020-37160 has been rated MEDIUM with a CVSS base score of 6.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-37160?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.