PT-2020-9880 · Fasttrack · Fasttrack Admin By Request

Published 2020-01-23 · Updated 2023-05-25 · CVE-2019-17201

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AC:L/AV:L/A:N/C:H/I:H/PR:N/S:C/UI:N

Name of the Vulnerable Software and Affected Versions FastTrack Admin By Request version 6.1.0.0

Description The issue concerns a vulnerable exposed functionality in the underlying service of FastTrack Admin By Request. When a user requests elevation using the AdminByRequest.exe interface, it communicates with the service (Audckq32.exe) using a .NET named pipe. The service relies on client-side validation and does not perform local checks for elevation requests. As a result, any user can request elevation and obtain Administrator privilege by communicating directly with the underlying service, bypassing group policies and permissions.

Recommendations For FastTrack Admin By Request version 6.1.0.0, consider disabling the elevation feature in the AdminByRequest.exe interface until a patch is available to prevent unauthorized access to Administrator privileges. Restrict access to the underlying service (Audckq32.exe) to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2019-17201

Affected Products

Fasttrack Admin By Request

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2019-17201 · Security Note
• https://osv.dev/vulnerability/CVE-2019-17201 · Vendor Advisory
• https://adminbyrequest.com/en/releasenotes · Note
• https://t.me/cvenotify/51115 · Telegram Post
• https://improsec.com/en/responsible-disclosure · Note