Description

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.

Related CPE's

a

elastic

endpoint_security

Vulnerable

o

microsoft

windows

-

References

https://discuss.elastic.co/t/endpoint-security-8-4-1-security-statement/323753

Vendor Advisory

https://www.elastic.co/community/security

Vendor Advisory

https://discuss.elastic.co/t/endpoint-security-8-4-1-security-statement/323753

Vendor Advisory

https://www.elastic.co/community/security

Vendor Advisory

Weaknesses

[email protected]

Secondary
CWE-269

[email protected]

Primary
NVD-CWE-noinfo

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 · High

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-01-26T20:15:50.300Z

3 years ago

Last modified

2025-04-02T12:15:36.480Z

11 months ago