CVE-2020-25289

MEDIUM · CVSS 5.5 EPSS 0.45%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-09-13 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2020-25289

Severity

MEDIUM

CVSS

5.5

EPSS

0.45%

Original NVD Description

The VPN service in AVAST SecureLine before 5.6.4982.470 allows local users to write to arbitrary files via an Object Manager symbolic link from the log directory (which has weak permissions).