CVE-2020-10553

Published: Feb 5, 2021Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

An issue was discovered in Psyprax before 3.2.2. The file %PROGRAMDATA%\Psyprax32\PPScreen.ini contains a hash for the lockscreen (aka screensaver) of the application. If that entry is removed, the lockscreen is no longer displayed and the app is no longer locked. All local users are able to modify that file.

Affected (1)

Products: Psyprax: Psyprax

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Psyprax Psyprax	Before 3.2.2

Related CWEs

Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (2)

https://www.x41-dsec.de/lab/advisories/x41-2020-002-psyprax

Source: cve@mitre.org

Third Party Advisory

https://www.x41-dsec.de/lab/advisories/x41-2020-002-psyprax

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.