Malwarebytes AdwCleaner 8.4.0 runs as Administrator and performs an insecure file delete operation on C:\AdwCleaner\Logs\AdwCleaner_Debug.log in which the target location is user-controllable, allowing a non-admin user to escalate privileges to SYSTEM via a symbolic link.
References
Configurations
History
21 Nov 2024, 07:56
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://forums.malwarebytes.com/topic/307429-release-adwcleaner-841/ - | |
| References | () https://malwarebytes.com - Product | |
| References | () https://www.malwarebytes.com/secure/cves/cve-2023-28892 - Vendor Advisory |
05 Mar 2024, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
01 Apr 2023, 01:39
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-59 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| CPE | cpe:2.3:a:malwarebytes:adwcleaner:*:*:*:*:*:*:*:* | |
| References | (MISC) https://malwarebytes.com - Product | |
| References | (MISC) https://www.malwarebytes.com/secure/cves/cve-2023-28892 - Vendor Advisory |
29 Mar 2023, 15:25
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-03-29 15:15
Updated : 2024-11-21 07:56
NVD link : CVE-2023-28892
Mitre link : CVE-2023-28892
CVE.ORG link : CVE-2023-28892
JSON object : View
Products Affected
malwarebytes
- adwcleaner
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')