Description
3CX Phone 15 on Windows has insecure permissions on the "%PROGRAMDATA%\3CXPhone for Windows\PhoneApp" installation directory, allowing Full Control access for Everyone, and leading to privilege escalation because of a StartUp link.
Unscored
CVE-2019-14935
EUVD-2019-6032GHSA-hvpm-x4rm-4ch5
3CX Phone 15 on Windows has insecure permissions on the "%PROGRAMDATA%\3CXPhone for Windows\PhoneApp" installation directory, allowing Full…
Published Aug 11, 2019 · Updated Aug 5, 2024 · Assigned by mitre