CNNVD-202512-3850 Information

CNNVD ID

CNNVD-202512-3850

CVE-2025-34290

  • CNNVD Published: 2025-12-20

Description (Chinese)

Versa SASE Client for Windows是美国Versa公司的一个安全联网客户端。 Versa SASE Client for Windows 7.8.7版本至7.9.4版本存在安全漏洞,该漏洞源于审计日志导出功能存在本地权限提升漏洞,可能导致任意目录删除。

Description (English)

Versa SASE Clinic for Windows is a secure online client of Versa in the United States. Versa SASE Clinic for Windows 7.8.7 to 7.9.4 contains a security loophole, which stems from the local rights enhancement gap in the exporting function of the audit log, which may lead to the removal of any directory.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Versa

Published

2025-12-20

Last Modified

2026-02-24

References

https://security-portal.versa-networks.com/emailbulletins/69421e33d03aafc8e5bdaf21 https://www.vulncheck.com/advisories/versa-sase-client-for-windows-arbitrary-file-deletion-leading-to-lpe https://access.redhat.com/security/cve/cve-2025-34290

Patch

https://security-portal.versa-networks.com/emailbulletins/69421e33d03aafc8e5bdaf21

Share on: