PT-2019-9565 · Capmon · Capmon Access Manager

Published 2019-03-15 · Updated 2019-10-03 · CVE-2018-18256

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CapMon Access Manager version 5.4.1.1005

Description A security issue allows a regular user to gain local administrator privileges by running any whitelisted application through the Custom App Launcher.

Recommendations For CapMon Access Manager version 5.4.1.1005, consider restricting access to the Custom App Launcher until a fix is available. As a temporary workaround, review and limit the list of whitelisted applications to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2018-18256

Affected Products

Capmon Access Manager

References · 3

• 🔥 https://improsec.com/tech-blog/cam1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-18256 · Security Note
• https://osv.dev/vulnerability/CVE-2018-18256 · Vendor Advisory