IBM Trusteer Rapport Installer Uncontrolled Search Path Vulnerability Allowing Arbitrary Code Execution
Vulnerability
A vulnerability in the IBM Trusteer Rapport installer version 3.5.2309.290 allows local attackers to execute arbitrary code on the system. This issue arises from a DLL uncontrolled search path element vulnerability. By placing a specially crafted file in a compromised folder, an attacker could exploit this vulnerability to execute arbitrary code.
Impact
Exploitation of this vulnerability could lead to unauthorized execution of arbitrary code on the affected system.
Remediation
IBM has released an updated installer version 3.5.2504.127, which is available through all public download links. Users should download the installer from official IBM sources to receive the secure version. Existing IBM Trusteer Rapport users do not need to update their installed product, as the vulnerability affects only the installer.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.