Directory traversal

2018-11-2908:29:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.0%

JSON

The agent in OSSEC through 3.1.0 on Windows allows local users to gain NT AUTHORITY\SYSTEM access via Directory Traversal by leveraging full access to the associated OSSEC server.

CPENameOperatorVersion
ossecle3.1.0
wazuhge1.0.0
wazuhle2.1.1

Name	Operator	Version
ossec	le	3.1.0
wazuh	ge	1.0.0
wazuh	le	2.1.1

References

github.com/ossec/ossec-hids/issues/1585