The agent in OSSEC through 3.1.0 on Windows allows local users to gain NT AUTHORITY\SYSTEM access via Directory Traversal by leveraging full access to the associated OSSEC server.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://github.com/ossec/ossec-hids/issues/1585 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2018-11-29T07:00:00Z
Updated: 2024-09-16T23:25:51.697Z
Reserved: 2018-11-29T00:00:00Z
Link: CVE-2018-19666
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2018-11-29T08:29:00.397
Modified: 2019-01-04T16:08:45.607
Link: CVE-2018-19666
Redhat
No data.