VULNERABILITY INTELLIGENCE

CVE-2021-27032

CVSS score7.8 HIGH
EPSS probability0.24%
CISA KEVNot currently listed
Published2021-05-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Autodesk Licensing Installer was found to be vulnerable to privilege escalation issues. A malicious user with limited privileges could run any number of tools on a system to identify services that are configured with weak permissions and are running under elevated privileges. These weak permissions could allow all users on the operating system to modify the service configuration and take ownership of the service.

Weakness classification

  • CWE-276: Incorrect Default Permissions

Primary references