An issue was discovered in Psyprax before 3.2.2. The file %PROGRAMDATA%\Psyprax32\PPScreen.ini contains a hash for the lockscreen (aka screensaver) of the application. If that entry is removed, the lockscreen is no longer displayed and the app is no longer locked. All local users are able to modify that file.
References
Link | Resource |
---|---|
https://www.x41-dsec.de/lab/advisories/x41-2020-002-psyprax | Third Party Advisory |
Configurations
Information
Published : 2021-02-05 12:15
Updated : 2021-02-08 12:22
NVD link : CVE-2020-10553
Mitre link : CVE-2020-10553
JSON object : View
CWE
CWE-732
Incorrect Permission Assignment for Critical Resource
Products Affected
psyprax
- psyprax