Description
Improper link resolution before file access in the Nomad module of the 1E Client, in versions prior to 25.3, enables an attacker with local unprivileged access on a Windows system to delete arbitrary files on the device by exploiting symbolic links.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| 1E | 1E Client | ≤ 24.5, ≤ 25.1 | 25.3 |