CVE-2018-18254

An issue was discovered in CapMon Access Manager 5.4.1.1005. An unprivileged user can read the calwhitelist table in the Custom App Launcher CAL database, and potentially gain privileges by placing a Trojan horse program at an app pathname...

CVE-2018-18256

CapMon Access Manager 5.4.1.1005 has a local privilege escalation: a regular user can obtain local administrator privileges by running any whitelisted application via the Custom App Launcher. The connected documents confirm the affected product/version and the impact (privilege escalation to admi...

CVE-2018-18253

CapMon Access Manager 5.4.1.1005 is affected. The issue centers on CALRunElevated.exe: it temporarily adds an unprivileged user to the local Administrators group to run a single command, but if the command crashes the user may remain in the Administrators group, and a race condition exists in all...

CVE-2018-18254

An issue was discovered in CapMon Access Manager 5.4.1.1005. An unprivileged user can read the calwhitelist table in the Custom App Launcher CAL database, and potentially gain privileges by placing a Trojan horse program at an app pathname...

CVE-2018-18255

An issue was discovered in CapMon Access Manager 5.4.1.1005. The client applications of AccessManagerCoreService.exe communicate with this server through named pipes. A user can initiate communication with the server by creating a named pipe and sending commands to achieve elevated privileges...

CVE-2018-18256

An issue was discovered in CapMon Access Manager 5.4.1.1005. A regular user can obtain local administrator privileges if they run any whitelisted application through the Custom App Launcher...

CVE-2018-18254

CVE-2018-18254 affects CapMon Access Manager 5.4.1.1005. An unprivileged user can read the CAL (Custom App Launcher) database table cal_whitelist, enabling potential privilege escalation by placing a Trojan horse program at an app pathname. Root cause is access to sensitive CAL data leading to el...

CVE-2018-18252

CVE-2018-18252 affects CapMon Access Manager 5.4.1.1005. The CALRunElevated.exe component allows an unprivileged user to obtain NT AUTHORITY\SYSTEM privileges via the --system option, constituting a local privilege escalation. The vulnerability is documented in NVD/CNVD records with CVSSv2/v3 bas...

CVE-2018-18253

An issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe attempts to enforce access control by adding an unprivileged user to the local Administrators group for a very short time to execute a single command. However, the user is left in that group if the command crashes, an...