PT-2019-9565 · Capmon · Capmon Access Manager

Publicado 2019-03-15 · Atualizado 2019-10-03 · CVE-2018-18256

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CapMon Access Manager version 5.4.1.1005

Description A security issue allows a regular user to gain local administrator privileges by running any whitelisted application through the Custom App Launcher.

Recommendations For CapMon Access Manager version 5.4.1.1005, consider restricting access to the Custom App Launcher until a fix is available. As a temporary workaround, review and limit the list of whitelisted applications to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2018-18256

Produtos afetados

Capmon Access Manager

Referências · 3

• 🔥 https://improsec.com/tech-blog/cam1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-18256 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-18256 · Aviso do Fabricante