PT-2019-8775 · Avecto · Avecto Defendpoint

Publicado 2019-04-17 · Atualizado 2020-12-29 · CVE-2018-10959

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Avecto Defendpoint versions 4 prior to 4.4 SR6 Avecto Defendpoint versions 5 prior to 5.1 SR1

Description The issue is related to an Untrusted Search Path, which can be exploited by modifying environment variables. This allows an attacker to trigger automatic elevation of their process launch.

Recommendations For Avecto Defendpoint version 4, update to version 4.4 SR6 or later. For Avecto Defendpoint version 5, update to version 5.1 SR1 or later.

Correção

Untrusted Search Path

Enumeração de Fraquezas

CWE-426

Identificadores relacionados

CVE-2018-10959

Produtos afetados

Avecto Defendpoint

Referências · 8

• https://osv.dev/vulnerability/CVE-2018-10959 · Aviso do Fabricante
• https://beyondtrust.com/docs/release-notes/privilege-management/windows-and-mac/windows/pm-windows-5-1.pdf · Nota
• https://t.me/cvenotify/7847 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2018-10959 · Nota de Segurança
• https://hackandpwn.com/assets/2019-04-17-cve-2018-10959/Defendpoint_Windows_Client_Release_Notes_4.4.267.0_SR6.pdf · Nota
• https://hackandpwn.com/cve-2018-10959 · Nota
• https://beyondtrust.com/docs/release-notes/privilege-management/windows-and-mac/windows/pm-windows-4-4-sr6.pdf · Nota
• https://hackandpwn.com/assets/2019-04-17-cve-2018-10959/Defendpoint_Windows_Client_Release_Notes_5.1.149.0_SR1.pdf · Nota