CVE-2019-11396

An issue was discovered in Avira Free Security Suite 10. The permissive access rights on the SoftwareUpdater folder (files / folders and configuration) are incompatible with the privileged file manipulation performed by the product. Files can be created that can be used by an unprivileged user to obtain SYSTEM privileges. Arbitrary file creation can be achieved by abusing the SwuConfig.json file creation: an unprivileged user can replace these files by pseudo-symbolic links to arbitrary files. When an update occurs, a privileged service creates a file and sets its access rights, offering write access to the Everyone group in any directory.

• CWE-59

• http://packetstormsecurity.com/files/153868/Avira-Free-Security-Suite-2019-Software-Updater-2.0.6.13175-Improper-Access-Control.html
• https://medium.com/sidechannel-br/vulnerabilidade-no-avira-security-suite-pode-levar-%C3%A0-escala%C3%A7%C3%A3o-de-privil%C3%A9gios-no-windows-71964236c077
• https://seclists.org/fulldisclosure/2019/Aug/1Mailing List, Third Party Advisory
• http://packetstormsecurity.com/files/153868/Avira-Free-Security-Suite-2019-Software-Updater-2.0.6.13175-Improper-Access-Control.html
• https://medium.com/sidechannel-br/vulnerabilidade-no-avira-security-suite-pode-levar-%C3%A0-escala%C3%A7%C3%A3o-de-privil%C3%A9gios-no-windows-71964236c077
• https://seclists.org/fulldisclosure/2019/Aug/1Mailing List, Third Party Advisory

Published

Aug 29, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1139A remote code execution vulnerability exists in the way that…4.2
• CVE-2019-11390An issue was discovered in OWASP ModSecurity Core Rule Set (…5.3
• CVE-2019-11391An issue was discovered in OWASP ModSecurity Core Rule Set (…5.3
• CVE-2019-11392BlogEngine.NET 3.3.7 and earlier allows XXE via an apml file…
• CVE-2019-11393An issue was discovered in /admin/users/update in M/Monit be…
• CVE-2019-11395A buffer overflow in MailCarrier 2.51 allows remote attacker…
• CVE-2019-11397GetFile.aspx in Rapid4 RapidFlows Enterprise Application Bui…
• CVE-2019-11398Multiple cross-site scripting (XSS) vulnerabilities in UliCM…
• CVE-2019-11399An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-65…9.8
• CVE-2019-1140A remote code execution vulnerability exists in the way that…8.8
• CVE-2019-11400An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-65…9.8
• CVE-2019-11401A issue was discovered in SiteServer CMS 6.9.0. It allows re…