Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The MSI installer in 1E Client 4.1.0.267 and 5.0.0.745 allows remote authenticated users and local users to gain elevated privileges via the repair option. This applies to installations that have a TRANSFORM (MST) with the option to disable the installation of the Nomad module. An attacker may craft a .reg file in a specific location that will be able to write to any registry key as an elevated user.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
1E Client 权限许可和访问控制问题漏洞
Vulnerability Description
1E Client是美国1E（1E Client）公司的一款无需部署代理的端点管理软件。 MSI installer in 1E Client 4.1.0.267版本至5.0.0.745版本存在安全漏洞，该漏洞允许远程身份验证用户和本地用户通过repair选项获得更高的权限。这适用于具有TRANSFORM (MST)的安装，其中MST选项可以禁用Nomad模块的安装。攻击者可利用该漏洞可能会在特定的位置创建一个.reg文件，该文件将能够以提升用户的身份写入任何注册表项。
CVSS Information
N/A
Vulnerability Type
N/A