SecuritySpace - CVE-2020-35152

Vulnerability Search		Search 324607 CVE descriptions and 146377 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2020-35152

Description: Cloudflare WARP for Windows allows privilege escalation due to an unquoted service path. A malicious user or process running with non- administrative privileges can become an administrator by abusing the unquoted service path issue. Since version 1.2.2695.1, the vulnerability was fixed by adding quotes around the service's binary path. This issue affects Cloudflare WARP for Windows, versions prior to 1.2.2695.1.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2020-35152
https://github.com/cloudflare/advisories/security/advisories/GHSA-qc57-v5q8-f22h
https://github.com/cloudflare/advisories/security/advisories/GHSA-qc57-v5q8-f22h

CVE ID:	CVE-2020-35152
Description:	Cloudflare WARP for Windows allows privilege escalation due to an unquoted service path. A malicious user or process running with non- administrative privileges can become an administrator by abusing the unquoted service path issue. Since version 1.2.2695.1, the vulnerability was fixed by adding quotes around the service's binary path. This issue affects Cloudflare WARP for Windows, versions prior to 1.2.2695.1.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2020-35152 https://github.com/cloudflare/advisories/security/advisories/GHSA-qc57-v5q8-f22h https://github.com/cloudflare/advisories/security/advisories/GHSA-qc57-v5q8-f22h