Local Privilege Escalation Vulnerability in VIPRE Advanced Security by Zix Corporation

CVE-2024-5928

What is CVE-2024-5928?

The local privilege escalation vulnerability in VIPRE Advanced Security arises from a flaw in the Patch Management Agent. By exploiting a symbolic link, an attacker with low privileges can delete a targeted file and escalate their privileges to execute arbitrary code with SYSTEM-level access. This vulnerability requires that the attacker already possesses the capability to execute low-privileged code, thereby limiting its immediate accessibility but still posing a significant risk. Organizations using affected versions of VIPRE Advanced Security should prioritize patching and proactive monitoring to mitigate potential exploits.

References