Description
The vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to delete or move files without having proper permissions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ESET, spol. s r.o. | ESET NOD32 Antivirus | — | 1463 |
| ESET, spol. s r.o. | ESET Internet Security | — | 1463 |
| ESET, spol. s r.o. | ESET Smart Security Premium | — | 1463 |
| ESET, spol. s r.o. | ESET Endpoint Antivirus | — | 1463 |
| ESET, spol. s r.o. | ESET Endpoint Security | — | 1463 |
| ESET, spol. s r.o. | ESET Server Security for Windows Server (File Security) | — | 1463 |
| ESET, spol. s r.o. | ESET Mail Security for Microsoft Exchange Server | — | 1463 |
| ESET, spol. s r.o. | ESET Mail Security for IBM Domino | — | 1463 |
| ESET, spol. s r.o. | ESET Security for Microsoft SharePoint Server | — | 1463 |
Advisories 1
- WID-SEC-2023-2055 ESET Server Security: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · Aug 13, 2023