This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2020-37160 | BDVDB-2026-314101 Detail

VeridiumSprintWork

Description#

SprintWork 2.3.1 contains multiple local privilege escalation vulnerabilities through insecure file, service, and folder permissions on Windows systems. Local unprivileged users can exploit missing executable files and weak service configurations to create a new administrative user and gain complete system access.

Impact#

Per CVSS v3.1: confidentiality impact high, integrity impact none, availability impact none. Attack vector: local.

Weaknesses#

  • CWE-276 Incorrect Default Permissions

References#

Exploit#

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.