PT-2019-9591 · Kioware · Kioware Server

Hashim Jawad + 1 · Publicado 2019-03-17 · Atualizado 2019-10-03 · CVE-2018-18435

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions KioWare Server versions 4.9.6 and older

Description The issue concerns weak folder permissions in the default installation directory, granting any user full access to the directory and its sub-folders. Additionally, a service called KWSService runs as Localsystem, allowing any user to potentially escalate privileges to NT AUTHORITYSYSTEM by substituting the service's binary with a malicious one.

Recommendations For KioWare Server versions 4.9.6 and older, consider restricting access to the installation directory and its sub-folders to prevent unauthorized modifications. As a temporary workaround, monitor the KWSService for any suspicious activity and consider disabling it until a patch is available. Restrict access to the service's binary to minimize the risk of exploitation.

Exploit

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2018-18435

Produtos afetados

Kioware Server

Referências · 7

• 🔥 http://packetstormsecurity.com/files/151031/KioWare-Server-4.9.6-Privilege-Escalation.html · Exploit
• 🔥 https://exploit-db.com/exploits/46093 · Exploit
• https://github.com/active-labs/Advisories/blob/master/2019/ACTIVE-2019-002.md · Nota
• https://kioware.com/patch.aspx · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-18435 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-18435 · Nota de Segurança
• https://m.kioware.com/news/kioware-press-releases/kioware_server_security_patch_update · Aviso do Fabricante