Vulnerabilities

In versions before 7.0.0.64, IDrive’s id_service.exe process runs with elevated privileges and regularly reads from several files under the C:\ProgramData\IDrive\ directory.

iDrive RemotePC before 7.6.48 on Windows allows privilege escalation.

iDrive RemotePC before 4.0.1 on Linux allows denial of service.

iDrive RemotePC before 7.6.48 on Windows allows authentication bypass.

iDrive RemotePC before 7.6.48 on Windows allows information disclosure.

iDrive RemotePC before 7.6.48 on Windows allows information disclosure.

iDrive RemotePC before 7.6.48 on Windows allows information disclosure.

IDrive before 6.7.3.19 on Windows installs by default to %PROGRAMFILES(X86)%\IDriveWindows with weak folder permissions granting any user modify permission (i.e., NT AUTHORITY\Authenticated Users:(OI)(CI)(M)) to the cont…