Improper access control

2023-01-2621:17:00

PRIOn knowledge base

www.prio-n.com

aternity

access control

local privilege escalation

riverbed aternity

nvd

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Incorrect access control in Aternity agent in Riverbed Aternity before 12.1.4.27 allows for local privilege escalation. There is an insufficiently protected handle to the A180AG.exe SYSTEM process with PROCESS_ALL_ACCESS rights.

CPENameOperatorVersion
aternitylt12.1.4.27

CPE	Name	Operator	Version
	aternity	lt	12.1.4.27

References

gist.github.com/jackullrich/21fcfe75aeb5e18c60b80e684b83d741

winternl.com/cve-2022-43997/