Privilege Escalation in RSA Web Threat Detection

CVE-2015-4548

What is CVE-2015-4548?

EMC RSA Web Threat Detection prior to version 5.1 SP1 contains a vulnerability that permits local users to escalate their privileges by exploiting access to a service account. This can be accomplished through writing unauthorized commands to a service configuration file, enabling the attacker to gain root privileges on the system. Organizations utilizing this product should consider implementing remediation measures to safeguard against potential exploitation.

References