Every CVE Search/ Get API key

CVE-2012-0279

Quest Toad for Data Analysts 3.0.1 uses weak permissions (Everyone: Full Control) for the ...

6.9 Medium

Quest Toad for Data Analysts 3.0.1 uses weak permissions (Everyone: Full Control) for the %COMMONPROGRAMFILES%\Quest Shared directory, which allows local users to gain privileges via a Trojan horse file.

Exploit likelihood

0.31%Down 0.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.9

Quest Toad for Data Analysts 3.0.1 uses weak permissions (Everyone: Full Control) for the %COMMONPROGRAMFILES%\Quest Shared directory, which allows local users to gain privileges via a Trojan horse file.

Record
CVE-2012-0279
CVSS 2.0
6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

Quest Toad for Data Analysts 3.0.1 uses weak permissions (Everyone: Full Control) for the %COMMONPROGRAMFILES%\Quest Shared directory, which allows local users to gain privileges via a Trojan horse file.

Record
CVE-2012-0279
Updated
2026-11-02
EUVDEUVD-2012-0315 No score

Quest Toad for Data Analysts 3.0.1 uses weak permissions (Everyone: Full Control) for the %COMMONPROGRAMFILES%\Quest Shared directory, which allows local users to gain privileges via a Trojan horse file.

Record
EUVD-2012-0315
Updated
2026-11-03
GitHub AdvisoriesGHSA-qr5x-q3gr-6hh7 No score

Quest Toad for Data Analysts 3.0.1 uses weak permissions (Everyone: Full Control) for the ...

Quest Toad for Data Analysts 3.0.1 uses weak permissions (Everyone: Full Control) for the %COMMONPROGRAMFILES%\Quest Shared directory, which allows local users to gain privileges via a Trojan horse file.

Record
GHSA-qr5x-q3gr-6hh7
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-0279 is a medium vulnerability (CVSS 6.9) in Quest Toad For Data Analysts, published May 1, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 24th percentile. No source names a fixed version.

References

MoveEnter Open