Impacted is confidentiality, integrity, and availability. This may cause it to follow unexpected code paths that may leave the application in an invalid state.

The application does not handle or incorrectly handles when it has insufficient privileges to access resources or functionality as specified by their permissions. Using CWE to declare the problem leads to CWE-280. The manipulation with an unknown input leads to a insufficient permissions or privileges vulnerability.

A high score indicates an elevated risk to be targeted for this vulnerability.Ī vulnerability, which was classified as critical, has been found in ESET NOD32 Antivirus, Internet Security, Smart Security Premium, Endpoint Antivirus, Endpoint Security, Server Security for Microsoft Windows Server, File Security for Microsoft Windows Server, Mail Security for Microsoft Exchange Server, Mail Security for IBM Domino and Security for Microsoft SharePoint Server ( Groupware Software).

The CTI Interest Score identifies the interest of attackers and the security community for this specific vulnerability in real-time. Our Cyber Threat Intelligence team is monitoring different web sites, mailing lists, exploit markets and social media networks.

Eset nod32 7.3