CVE-2020-14990: High severity iobit advanced systemcare ultimate vulnerability

Published Jun 22, 2020

Updated

IOBit Advanced SystemCare Free 13.5.0.263 allows local users to gain privileges for file deletion by manipulating the Clean & Optimize feature with an NTFS junction and an Object Manager symbolic link.

Affected Software

1 affected component

IObit Advanced SystemCare=13.5.0.263

Event History

Jun 22, 2020

CVE Published

via MITRE·08:53 PM

Data Sourced

via MITRE·08:53 PM

Description

Frequently Asked Questions

What is CVE-2020-14990?

CVE-2020-14990 is a vulnerability in IOBit Advanced SystemCare Free 13.5.0.263 that allows local users to gain privileges for file deletion by manipulating the Clean & Optimize feature with an NTFS junction and an Object Manager symbolic link.

How can local users exploit CVE-2020-14990?

Local users can exploit CVE-2020-14990 by manipulating the Clean & Optimize feature with an NTFS junction and an Object Manager symbolic link.

What is the severity of CVE-2020-14990?

CVE-2020-14990 has a severity rating of high with a score of 7.1.

Which version of IOBit Advanced SystemCare Free is affected by CVE-2020-14990?

Version 13.5.0.263 of IOBit Advanced SystemCare Free is affected by CVE-2020-14990.

Is there a fix available for CVE-2020-14990?

At the moment, there is no information about a fix available for CVE-2020-14990. It is recommended to monitor the software vendor's website for updates and patches.