CVE-2020-27977

Published: Nov 9, 2020Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

CapaSystems CapaInstaller before 6.0.101 does not properly assign, modify, or check privileges for an actor who attempts to edit registry values, allowing an attacker to escalate privileges.

Affected (1)

Products: Capasystems: Capainstaller

Capasystems

1 product

Capainstaller

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Capasystems Capainstaller	Before 6.0.101

References (2)

https://capawiki.capasystems.com/display/ci/CapaInstaller+6.0+-+Build+101

Source: cve@mitre.org

Release NotesVendor Advisory

https://capawiki.capasystems.com/display/ci/CapaInstaller+6.0+-+Build+101

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

Timeline

No history available yet.