Description
`cloudflared` versions prior to 2020.8.1 contain a local privilege escalation vulnerability on Windows systems. When run on a Windows system, `cloudflared` searches for configuration files which could be abused by a malicious entity to execute commands as a privileged user. Version 2020.8.1 fixes this issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cloudflare | cloudflared | unspecified – < 2020.8.1 | 2020.8.1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/cloudflare/cloudflared | < 0.0.0-20200820025921-9323844ea773 | 0.0.0-20200820025921-9323844ea773 | GHSA-hgwp-4vp4-qmm2 |