8x8 · Report #1519437

DLL Search-Order Hijacking Vulnerability in work-64-exe-v7.16.3-1.exe

Validstatus

lowseverity

5upvotes

22 Sept 2022disclosed

Summary

@is- reported to us a DLL Search-Order Hijacking vulnerability in work-64-exe-v7.16.3-1.exe. Reference: https://attack.mitre.org/techniques/T1574/001/ The underlying issue was found in an older version of Squirrel.Windows. Issue Reference: https://github.com/Squirrel/Squirrel.Windows/issues/1801

We've updated the utilised Squirrel.Windows to the latest available version 2.0.1 and published a newer version of 8x8 Work ➡️ 7.22 published on 08/26/22: https://support.8x8.com/cloud-phone-service/voice/work-desktop/download-8x8-work-for-desktop

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original