Security & Vulnerability Researcher / Professional Penetration Tester


The %PROGRAMDATA%\1E\Client directory in 1E Client and allows remote authenticated users and local users to create and modify files in protected directories (where they would not normally have access to create or modify files) via the creation of a junction point to a system directory. This leads to partial privilege escalation. This vulnerability can be mitigated by changing the permission of the ProgramData\1E\Client directory so that a standard user does not have the ability to create and modify files.

1E Security Advisory

buy me a coffee