CVE-2020-15528 : Security Advisory and Response

An issue was discovered in GOG Galaxy Client 2.0.17 that allows for local escalation of privileges when a user starts or uninstalls a game due to weak file permissions and missing file integrity checks.

Understanding CVE-2020-15528

This CVE identifies a vulnerability in the GOG Galaxy Client that could be exploited for privilege escalation.

What is CVE-2020-15528?

The vulnerability in GOG Galaxy Client 2.0.17 enables local users to elevate their privileges by manipulating file permissions during game start or uninstallation.

The Impact of CVE-2020-15528

The vulnerability poses a security risk as it allows unauthorized users to gain elevated privileges on the system, potentially leading to further exploitation or compromise.

Technical Details of CVE-2020-15528

The technical aspects of the vulnerability are as follows:

Vulnerability Description

Weak file permissions and missing file integrity checks in GOG Galaxy Client 2.0.17

Affected Systems and Versions

Product: GOG Galaxy Client
Vendor: GOG
Version: 2.0.17

Exploitation Mechanism

Local users can exploit the vulnerability during game start or uninstallation to escalate their privileges.

Mitigation and Prevention

To address CVE-2020-15528, consider the following steps:

Immediate Steps to Take

Update GOG Galaxy Client to the latest version to patch the vulnerability.
Monitor system logs for any suspicious activities related to file permissions.

Long-Term Security Practices

Implement the principle of least privilege to restrict user permissions.
Regularly audit and review file permissions and integrity checks on the system.

Patching and Updates

Stay informed about security updates for GOG Galaxy Client and apply patches promptly to mitigate known vulnerabilities.