CVE-2018-19666

2018-11-2907:00:00

mitre

www.cve.org

ossec agent

windows

local user

system access

directory traversal

AI Score

7.7

Confidence

High

EPSS

Percentile

9.9%

JSON

The agent in OSSEC through 3.1.0 on Windows allows local users to gain NT AUTHORITY\SYSTEM access via Directory Traversal by leveraging full access to the associated OSSEC server.

References

github.com/ossec/ossec-hids/issues/1585