Local User Privilege Escalation in OSSEC on Windows
CVE-2018-19666

7.8HIGH

Key Information:

Vendor

Ossec

Status
Ossec
Vendor
CVE Published:
29 November 2018

What is CVE-2018-19666?

A vulnerability in OSSEC version 3.1.0 for Windows permits local users to escalate their privileges to NT AUTHORITY\SYSTEM. By exploiting directory traversal techniques, an attacker with local access can manipulate the OSSEC server's file system and gain unauthorized control, potentially compromising the entire system's security. This highlights significant concerns regarding file access permissions and the need for robust security measures to prevent such unauthorized access.

References

https://github.com/ossec/ossec-hids/issues/1585
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability Reserved

  • Vulnerability published

JSON
.