漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
AOMEI Backupper Workstation Link Following Local Privilege Escalation Vulnerability
Vulnerability Description
AOMEI Backupper Workstation Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of AOMEI Backupper Workstation. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. User interaction on the part of an administrator is needed additionally. The specific flaw exists within the restore functionality. By creating a junction, an attacker can abuse the service to create arbitrary files. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-27059.
CVSS Information
N/A
Vulnerability Type
在文件访问前对链接解析不恰当(链接跟随)
Vulnerability Title
AOMEI Backupper Workstation 后置链接漏洞
Vulnerability Description
AOMEI Backupper Workstation是中国傲梅科技(AOMEI)公司的一个系统备份和还原软件。 AOMEI Backupper Workstation存在后置链接漏洞,该漏洞源于链接跟随不当,可能导致本地权限提升。
CVSS Information
N/A
Vulnerability Type
N/A