The FACSChorus software does not properly assign data access privileges for operating system user accounts. A non-administrative OS account can modify information stored in the local application data folders.
Weakness
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Facschorus | Bd | 5.0 (including) | 5.0 (including) |
| Facschorus | Bd | 5.1 (including) | 5.1 (including) |