CVE-2018-19666

2018-11-2908:29:00

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.0%

JSON

The agent in OSSEC through 3.1.0 on Windows allows local users to gain NT AUTHORITY\SYSTEM access via Directory Traversal by leveraging full access to the associated OSSEC server.

CPENameOperatorVersion
wazuheq1.1.1
wazuheq1.0.3
wazuheq2.1.0
wazuheq1.0.1
wazuheq1.0
wazuheq2.0
wazuheq2.0.1
wazuheq1.0.4
wazuheq2.1.1
wazuheq1.1

Name	Operator	Version
wazuh	eq	1.1.1
wazuh	eq	1.0.3
wazuh	eq	2.1.0
wazuh	eq	1.0.1
wazuh	eq	1.0
wazuh	eq	2.0
wazuh	eq	2.0.1
wazuh	eq	1.0.4
wazuh	eq	2.1.1
wazuh	eq	1.1

Rows per page:

1-10 of 111

References

github.com/ossec/ossec-hids/issues/1585