Client vulnerabilities

2 known vulnerabilities in Client from 1E. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  1E Client: Files or Directories Accessible to External Parties

  CVE-2023-45160Oct 5, 20231E

  In the affected version of the 1E Client, an ordinary user could subvert downloaded instruction resource files, e.g., to substitute a harmful script. by replacing a resource script file created by an instruction at run time with a malicious script. The 1E Clie

• 8.4 High severity

  1E Client: Improper Link Resolution Before File Access

  CVE-2023-45159Oct 5, 20231E

  1E Client installer can perform arbitrary file deletion on protected files. A non-privileged user could provide a symbolic link or Windows junction to point to a protected directory in the installer that the 1E Client would then clear on service startup. A hot