1. Home
  2. CVE Database
  3. CVE-2021-41066
HIGH · 7.5

CVE-2021-41066

An issue was discovered in Listary through 6. When Listary is configured as admin, Listary will not ask for permissions again if a user tries to access files on the system from Listary itself (it will...

Vulnerability Description

An issue was discovered in Listary through 6. When Listary is configured as admin, Listary will not ask for permissions again if a user tries to access files on the system from Listary itself (it will bypass UAC protection; there is no privilege validation of the current user that runs via Listary).

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
BopsoftListary<= 6

Related Weaknesses (CWE)

CWE-862

References

FAQ

What is CVE-2021-41066?

CVE-2021-41066 is a vulnerability with a CVSS score of 7.5 (HIGH). An issue was discovered in Listary through 6. When Listary is configured as admin, Listary will not ask for permissions again if a user tries to access files on the system from Listary itself (it will...

How severe is CVE-2021-41066?

CVE-2021-41066 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-41066?

Check the references section above for vendor advisories and patch information. Affected products include: Bopsoft Listary.