PT-2018-15037 · Trend Micro · Ossec

Nealdjo · Published 2018-11-29 · Updated 2019-01-04 · CVE-2018-19666

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OSSEC versions through 3.1.0

Description The issue allows local users to gain NT AUTHORITYSYSTEM access via Directory Traversal by leveraging full access to the associated OSSEC server.

Recommendations For OSSEC versions through 3.1.0, update to a version later than 3.1.0 to resolve the issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2018-19666

Affected Products

Ossec

References · 4

• 🔥 https://github.com/ossec/ossec-hids/issues/1585 · Exploit
• https://osv.dev/vulnerability/CVE-2018-19666 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-19666 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19666 · Note