CVE-2020-1985— Secdo: Incorrect Default Permissions
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-1985
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Secdo: Incorrect Default Permissions
Source: NVD (National Vulnerability Database)
Vulnerability Description
Incorrect Default Permissions on C:\Programdata\Secdo\Logs folder in Secdo allows local authenticated users to overwrite system files and gain escalated privileges. This issue affects all versions Secdo for Windows.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
缺省权限不正确
Source: NVD (National Vulnerability Database)
Vulnerability Title
Palo Alto Networks Secdo 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Palo Alto Networks Secdo是美国Palo Alto Networks公司的一套安全事件响应解决方案。 Palo Alto Networks Secdo中的C:ProgramdataSecdoLogs文件夹存在安全漏洞，该漏洞源于程序为文件夹设置了不正确的默认权限。攻击者可利用该漏洞提升权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2020-1985
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-1985
请登录查看更多情报信息。
- https://security.paloaltonetworks.com/CVE-2020-1985x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2020-1985
Same Patch Batch · Secdo · 2020-04-08 · 3 CVEs total
| CVE-2020-1984 | 7.8 HIGH | Secdo: Privilege escalation via hardcoded script path |
| CVE-2020-1986 | 5.5 MEDIUM | Secdo: Local authenticated users can cause Windows system crash |
IV. Related Vulnerabilities
Same weakness: CWE-276
- CVE-2026-0539
Local Privilege Escalation in pcvisit service client - CVE-2026-6823
HKUDS OpenHarness Insecure Default Remote Channel Allowlist - CVE-2026-6819
HKUDS OpenHarness Plugin Management Command Exposure - CVE-2026-39454
SKYSEA Client View 安全漏洞 - CVE-2026-30811
Missing Authorization in Configuration Ajax Endpoint leads t
V. Comments for CVE-2020-1985
No comments yet