cve/2020/CVE-2020-14990.md

### [CVE-2020-14990](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14990)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

IOBit Advanced SystemCare Free 13.5.0.263 allows local users to gain privileges for file deletion by manipulating the Clean & Optimize feature with an NTFS junction and an Object Manager symbolic link.

### POC

#### Reference
- https://daniels-it-blog.blogspot.com/2020/06/arbitrary-file-deletion-in-iobit.html
- https://daniels-it-blog.blogspot.com/2020/06/arbitrary-file-deletion-in-iobit.html
- https://github.com/Daniel-itsec/AdvancedSystemCare
- https://github.com/Daniel-itsec/AdvancedSystemCare

#### Github
- https://github.com/Daniel-itsec/AdvancedSystemCare