CVE-2023-29820

MediumCVSS 5.5

Published: 12/05/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

7th percentile - higher than 7% of all known CVEs

Summary

An issue in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to access sensitive information via the EXE installer. The vendor notes this is not a separate vulnerability from CVE-2023-29818 and CVE-2023-29819.

Risk Assessment

A local attacker could access sensitive organizational data, potentially leading to information disclosure and privilege escalation.

Recommendation

Update to the latest version of Webroot SecureAnywhere Endpoint Protection CE and implement local access restrictions.

Original NVD description (English source)

An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to access sensitive information via the EXE installer. NOTE: the vendor's perspective is that this is not a separate vulnerability relative to CVE-2023-29818 and CVE-2023-29819.