2023-05-10-Webroot-SecureAnywhere

May 10, 2023  less than 1 minute read  

CVE-2023-29818 (CVE-2023-29818) CWE-183 - Permissive List of Allowed Inputs: An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to bypass protections via the default allowlist feature being stored as non-admin. A local attacker can match their payload to a file name, file path, and file size of one of the files contained within th...