Description

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.

Related CPE's

a

elastic

endpoint_security

Vulnerable

o

microsoft

windows

-

References

https://discuss.elastic.co/t/endpoint-security-8-4-1-security-statement/323753

Vendor Advisory

https://www.elastic.co/community/security

Vendor Advisory

Weaknesses

[email protected]

Primary
NVD-CWE-noinfo

[email protected]

Secondary
CWE-269

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2023-01-26T21:15:50.300

2 years ago

Last modified

2023-02-03T18:24:06.557

2 years ago