Description
ActivIdentity 8.2 contains an unquoted service path vulnerability in the ac.sharedstore service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path in C:\Program Files\Common Files\ActivIdentity\ to inject malicious executables and escalate privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HID Global | ActivIdentity | 8.2 | — |
References
- ExploitDB-49703 exploit
- HID Global Official Website product
- VulnCheck Advisory: ActivIdentity 8.2 - 'ac.sharedstore' Unquoted Service Path third-party-advisory