PT-2019-12488 · Teamviewer · Teamviewer

Publicado 2019-09-11 · Atualizado 2019-09-13 · CVE-2019-11769

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TeamViewer version 14.2.2558

Description A local attacker can exploit an issue in the product to obtain administrative credentials and elevate privileges. This occurs because the product requires administrative credentials to be entered into the GUI when updating as a non-administrative user. These credentials are then processed in cleartext within the process memory of Teamviewer.exe, allowing any application running in the same non-administrative user context to intercept them. The vulnerability can be exploited by injecting code into Teamviewer.exe to intercept calls to GetWindowTextW and log the processed credentials.

Recommendations For TeamViewer version 14.2.2558, update the product to a newer version that addresses this issue. As a temporary workaround, consider running the update process in an administrative context to minimize the risk of credential interception. Restrict access to the Teamviewer.exe process to prevent code injection and minimize the risk of exploitation.

Correção

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

Identificadores relacionados

CVE-2019-11769

Produtos afetados

Teamviewer

Referências · 4

• https://osv.dev/vulnerability/CVE-2019-11769 · Aviso do Fabricante
• https://blog.to.com/advisory-teamviewer-cve-2019-11769-2 · Nota
• https://community.teamviewer.com/t5/Knowledge-Base/tkb-p/Knowledgebase?type=label&labels=Security · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-11769 · Nota de Segurança