Lucene search

[email protected]CVE-2022-38775

HistoryJan 26, 2023 - 9:15 p.m.

CVE-2022-38775

2023-01-2621:15:50

CWE-269

[email protected]

web.nvd.nist.gov

cve-2022-38775

elastic endpoint security

windows

privilege escalation

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.

Affected configurations

NVD

Node

elasticendpoint_securityRange<8.4.1

AND

microsoftwindowsMatch-

CPENameOperatorVersion
elastic:endpoint_securityelastic endpoint securitylt8.4.1

CPE	Name	Operator	Version
elastic:endpoint_security	elastic endpoint security	lt	8.4.1

CNA Affected

[
  {
    "vendor": "Elastic",
    "product": "Elastic Endpoint Security",
    "versions": [
      {
        "version": "Version 8.4.0",
        "status": "affected"
      }
    ]
  }
]

References

discuss.elastic.co/t/endpoint-security-8-4-1-security-statement/323753

www.elastic.co/community/security

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for CVE-2022-38775

cvelist1 prion1 nvd1