PT-2019-15296 · Reliable Controls · Reliable Controls Licensemanager

Published 2019-12-11 · Updated 2019-12-17 · CVE-2019-18245

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Reliable Controls LicenseManager versions 3.4 and prior

Description The issue may allow an authenticated user to insert malicious code into the system root path, potentially enabling the execution of code with elevated privileges of the application.

Recommendations For versions 3.4 and prior, update to a version later than 3.4 to resolve the issue.

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2019-18245

Affected Products

Reliable Controls Licensemanager

References · 3

• https://osv.dev/vulnerability/CVE-2019-18245 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-18245 · Security Note
• https://us-cert.gov/ics/advisories/icsa-19-337-01 · Note