Opened 8 years ago
FileZilla run from installer runs under admin privs
|Reported by:||Martin||Owned by:|
|Component version:||Operating system type:||Windows|
|Operating system version:||Windows 7 Pro x64|
After upgrading to FileZilla 3.6.0, I allowed the installer to launch FileZilla.
This is on Win7 Pro x64, where I had right-clicked on the FileZilla installer, and selected "run as administrator".
However, it looks like the instance of FileZilla, as launched by the installer, will then also run with elevated privileges!
I noticed this when I used FileZilla to connect to a previously saved site, and FileZilla couldn't see a mapped drive letter (my logon session can see the shared drive, but anything running under elevated privileges can't see mapped drives).
This is a concern, because it means the instance of FileZilla launched by the installer has admin privs, instead of being reduced to normal user privs, as it would be when I launch it as myself.