Telerik Fiddler v5.0.20182.28034 doesn't verify the hash of EnableLoopback.exe before running it, which could lead to code execution or local privilege escalation by replacing the original EnableLoopback.exe.
References
Link | Resource |
---|---|
https://vuldb.com/?id.135671 | Third Party Advisory |
Configurations
Information
Published : 2019-06-03 14:29
Updated : 2020-08-24 10:37
NVD link : CVE-2019-12097
Mitre link : CVE-2019-12097
JSON object : View
CWE
CWE-354
Improper Validation of Integrity Check Value
Products Affected
progress
- fiddler