CVE-2019-8385 - CVE House
Back to Database
Status published Critical CVE-2019-8385

An issue was discovered in Thomson Reuters Desktop Extensions 1.9.0.358....

Vulnerability Description

An issue was discovered in Thomson Reuters Desktop Extensions 1.9.0.358. An unauthenticated directory traversal and local file inclusion vulnerability in the ThomsonReuters.Desktop.Service.exe and ThomsonReuters.Desktop.exe allows a remote attacker to list or enumerate sensitive contents of files via a \.. to port 6677. Additionally, this could allow for privilege escalation by dumping the affected machine's SAM and SYSTEM database files, as well as remote code execution.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-8385

Credits & Attribution

No credits recorded in the NVD database.

References

More from thomsonreuters

View All →
CVE-2019-10679
Thomson Reuters Eikon 4.0.42144 allows all local users to modify...
High 7.8
CVE-2018-14608
Thomson Reuters UltraTax CS 2017 on Windows has a password...
High 7.5
CVE-2018-14607
Thomson Reuters UltraTax CS 2017 on Windows, in a client/server...
High 7.5
CVE-2015-5952
Directory traversal vulnerability in Thomson Reuters for FATCA before 5.2...
Critical 9.8
CVE-2015-5951
A file upload issue exists in the specid parameter in...
Critical 9.9

Affected Vendor

thomsonreuters

View all reports →

Affected Software

concourse matter room, firm central desktop
Vulnerable Versions:
0

Timeline

Official Publish: June 5th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.