← Database

CVE-2021-47859

HIGH CVSS: 7.8 Published: 2026-01-21 Modified: 2026-06-17

Description

ActivIdentity 8.2 contains an unquoted service path vulnerability in the ac.sharedstore service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path in C:\Program Files\Common Files\ActivIdentity\ to inject malicious executables and escalate privileges.

Affected Platforms

Unknown

Weakness Type

CWE-428

References