CVE-2020-11613 | BDVDB-2026-137271 Detail

Description#

Mids' Reborn Hero Designer 2.6.0.7 has an elevation of privilege vulnerability due to default and insecure permissions being set for the installation folder. By default, the Authenticated Users group has Modify permissions to the installation folder. Because of this, any user on the system can replace binaries or plant malicious DLLs to obtain elevated, or different, privileges, depending on the context of the user that runs the application.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/Crytilis/mids-reborn-hero-designer/releases
https://www.doyler.net/security-not-included/mids-reborn-vulnerabilities

Exploit#

No public exploit known

History#

Version 12020-06-11Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.