Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

-BlockedExecution pop-up does not show when Toolkit_TempPath is set to $envTemp #526

Closed
LuHKae opened this issue Jun 30, 2020 · 2 comments
Closed
Labels
Status: Complete Issue resolved / work complete Type: Issue / Bug Something isn't working as expected
Milestone

Comments

@LuHKae
Copy link

LuHKae commented Jun 30, 2020

Describe the bug
Due to the fixes made for the security issue in 3.8.2 [Reserved CVE-2020-10962], the BlockedExecution-Window will not open, when a User tries to open a blocked app. Instead you will see an Error-Message from Windows Script Host.

To Reproduce
Steps to reproduce the behavior:

  1. Deployment-Script with -BlockedExecution and -CloseApps in Show-InstallationWelcome
  2. Open one of the blocked apps as user without admin rights
  3. Run the Deploy-Script with admin rights
  4. Close the blocked app, when prompt asks you to do
  5. Try to reopen the blocked app as user without admin rights, while the script is still running
  6. you will get an error message from Windows Script Host
  7. Change <Toolkit_TempPath> in 'AppDeployToolkitConfig.xml' to $envSystemDrive\Users\Public
  8. Redo Steps 2 - 4
  9. Now the pop-up will be shown

Toolkit Version:
3.8.2

@luki1412
Copy link
Contributor

luki1412 commented Jul 1, 2020

Thank you for the report. Will look into it.

@luki1412 luki1412 added the Status: Needs Triage Needs to be labelled and assigned for review label Jul 1, 2020
@luki1412 luki1412 added Type: Issue / Bug Something isn't working as expected and removed Status: Needs Triage Needs to be labelled and assigned for review labels Jul 17, 2020
@luki1412 luki1412 reopened this Aug 14, 2020
@luki1412 luki1412 added the Status: Complete Issue resolved / work complete label Sep 29, 2020
@luki1412
Copy link
Contributor

This will be fixed in the next release.

@luki1412 luki1412 added this to the v3.8.3 milestone Mar 18, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Status: Complete Issue resolved / work complete Type: Issue / Bug Something isn't working as expected
Projects
None yet
Development

No branches or pull requests

2 participants