Quest Toad for Data Analysts contains a flaw related to the %CommonProgramFiles%\Quest Shared directory and some of its child objects. The issue is triggered by the 'Everyone' group being given 'Full Control' by default, which may allow a local attacker to remove, manipulate, or delete files.
Classification
Location:
Local Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Workaround
Exploit:
Exploit Private
Disclosure:
Uncoordinated Disclosure
Solution
Currently, there are no known upgrades or patches to correct this vulnerability. It is possible to temporarily work around the flaw by implementing the following workaround: adjust permissions to be more secure.
