Design/Logic Flaw

2023-01-2621:15:00

PRIOn knowledge base

www.prio-n.com

elastic endpoint security

rollback feature

privilege escalation

windows

nvd

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.

CPENameOperatorVersion
endpoint_securitylt8.4.1

CPE	Name	Operator	Version
	endpoint_security	lt	8.4.1

References

discuss.elastic.co/t/endpoint-security-8-4-1-security-statement/323753

www.elastic.co/community/security