PT-2019-9591 · Kioware · Kioware Server

Hashim Jawad + 1 · Published 2019-03-17 · Updated 2019-10-03 · CVE-2018-18435

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions KioWare Server versions 4.9.6 and older

Description The issue concerns weak folder permissions in the default installation directory, granting any user full access to the directory and its sub-folders. Additionally, a service called KWSService runs as Localsystem, allowing any user to potentially escalate privileges to NT AUTHORITYSYSTEM by substituting the service's binary with a malicious one.

Recommendations For KioWare Server versions 4.9.6 and older, consider restricting access to the installation directory and its sub-folders to prevent unauthorized modifications. As a temporary workaround, monitor the KWSService for any suspicious activity and consider disabling it until a patch is available. Restrict access to the service's binary to minimize the risk of exploitation.

Exploit

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2018-18435

Affected Products

Kioware Server

References · 7

• 🔥 http://packetstormsecurity.com/files/151031/KioWare-Server-4.9.6-Privilege-Escalation.html · Exploit
• 🔥 https://exploit-db.com/exploits/46093 · Exploit
• https://kioware.com/patch.aspx · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-18435 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-18435 · Security Note
• https://m.kioware.com/news/kioware-press-releases/kioware_server_security_patch_update · Vendor Advisory
• https://github.com/active-labs/Advisories/blob/master/2019/ACTIVE-2019-002.md · Note