CVE-2019-16896: High severity k7 ultimate security vulnerability
In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll (aka the backup module) improperly validates the administrative privileges of the user, allowing an arbitrary file write via a symbolic link attack with file restoration functionality.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-16896?
The severity of CVE-2019-16896 is classified as high due to the potential for arbitrary file write via a symbolic link attack.
How do I fix CVE-2019-16896?
To fix CVE-2019-16896, ensure that you upgrade to a newer version of K7 Ultimate Security that patches this vulnerability.
What systems are affected by CVE-2019-16896?
CVE-2019-16896 affects K7 Ultimate Security version 16.0.0117.
What type of attack is associated with CVE-2019-16896?
CVE-2019-16896 is associated with a symbolic link attack that can lead to arbitrary file write.
What component of K7 Ultimate Security is vulnerable in CVE-2019-16896?
The vulnerable component in CVE-2019-16896 is the K7BKCExt.dll module, specifically the backup functionality.