description: GE Communicator, all versions prior to 4.0.517, allows a non-administrative user to place malicious files within the installer file directory, which may allow an attacker to gain administrative privileges on a system during installation or upgrade.
problem types: UNCONTROLLED SEARCH PATH CWE-427
affected:
{
product: GE Communicator
vendor: n/a
versions:
status: affected, version: All versions prior to 4.0.517
}