Skip to content
OpenAdvisories
High · 7.5 CVE-2020-25842 EUVD-2020-18475GHSA-h7qr-pc33-78hj

CHANGING Inc. NHIServiSignAdapter Windows Versions - Arbitrary File Access

Published Dec 31, 2020 · Updated Sep 16, 2024 · Assigned by twcert

Description

The encryption function of NHIServiSignAdapter fail to verify the file path input by users. Remote attacker can access arbitrary files through the flaw without privilege.

Affected products

VendorProductAffectedFixed
CHANGING NHIServiSignAdapter 1.0.20.0218 —

References