CVE-2020-1985 - CVE House
Back to Database
Status published High CVE-2020-1985

Secdo: Incorrect Default Permissions

Vulnerability Description

Incorrect Default Permissions on C:\Programdata\Secdo\Logs folder in Secdo allows local authenticated users to overwrite system files and gain escalated privileges. This issue affects all versions Secdo for Windows.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-1985

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • We like to thank Eviatar Gerzi of CyberArk Labs Team for discovering and reporting this issue.

References

More from Secdo

View All →
CVE-2020-1986
Secdo: Local authenticated users can cause Windows system crash
Medium 5.5
CVE-2020-1984
Secdo: Privilege escalation via hardcoded script path
High 7.8

Affected Vendor

Affected Software

Secdo
Vulnerable Versions:
all versions

Timeline

Official Publish: April 8th, 2020
Last Modified: September 16th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-276

MITRE ATT&CK TTPs

T1222 File and Directory Permissions Modification
Defense Evasion
T1078 Valid Accounts
Persistence
T1574 Hijack Execution Flow
Privilege Escalation
T1021 Remote Services
Lateral Movement
T1005 Data from Local System
Collection