CVE-2022-38777

CVE-2022-38777 concerns a privilege-escalation in Elastic Endpoint Security for Windows due to a flaw in the rollback/quarantine workflow. The issue could allow an unprivileged user to elevate to LocalSystem by exploiting insufficient access control in the quarantine-related logic. Affected softw...

Elastic Endpoint Security 安全漏洞

Elastic Endpoint Security is a suite of endpoint security solutions from Elastic. A security vulnerability exists in Elastic Endpoint Security for Windows. An attacker exploited the vulnerability to elevate its privileges to those of the LocalSystem account...

CVE-2022-38777

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

CVE-2022-38777

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

CVE-2022-38775

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

CVE-2022-38775

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

CVE-2022-38774

An issue was discovered in the quarantine feature of Elastic Endpoint Security and Elastic Endgame for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

CVE-2022-38774

An issue was discovered in the quarantine feature of Elastic Endpoint Security and Elastic Endgame for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

Design/Logic Flaw

An issue was discovered in the quarantine feature of Elastic Endpoint Security and Elastic Endgame for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

Design/Logic Flaw

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

Admin TakeOver

Description The endpoint /api/v2/token/ allows an unauthorized user to perform brute-forcing and the app doesn't block the request which not having any SESSION COOKIE or even CSRF token Request POST /api/v2/token/ HTTP/1.1 Host: demo.modoboa.org User-Agent: Mozilla/5.0 X11; Linux x8664; rv:109.0...

Elastic Endpoint Security 安全漏洞

Elastic Endpoint Security is a suite of endpoint security solutions from Elastic. A security vulnerability exists in Elastic Endpoint Security and Elastic Endgame that stems from an issue in the isolation feature that could allow an unprivileged user to elevate their privileges to the privileges ...

Elastic Endpoint Security 安全漏洞

Elastic Endpoint Security is an endpoint security solution from Elastic. A security vulnerability exists in Elastic Endpoint Security that stems from a faulty rollback feature that could allow an unprivileged user to elevate their privileges to the privileges of a system account...

Siemens Desigo PXM Devices Cross-Site Request Forgery (CVE-2022-40179)

A vulnerability has been identified in Desigo PXM30-1 All versions V02.20.126.11-41, Desigo PXM30.E All versions V02.20.126.11-41, Desigo PXM40-1 All versions V02.20.126.11-41, Desigo PXM40.E All versions V02.20.126.11-41, Desigo PXM50-1 All versions V02.20.126.11-41, Desigo PXM50.E All versions...

CVE-2022-38774

An issue was discovered in the quarantine feature of Elastic Endpoint Security and Elastic Endgame for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

PT-2023-13651 · Elastic · Endpoint Security +1

Name of the Vulnerable Software and Affected Versions: Elastic Endpoint Security and Elastic Endgame for Windows affected versions not specified Description: An issue was discovered in the quarantine feature, which could allow unprivileged users to elevate their privileges to those of the...

CVE-2022-38775

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

PT-2023-13652 · Elastic · Endpoint Security

Name of the Vulnerable Software and Affected Versions: Elastic Endpoint Security for Windows affected versions not specified Description: An issue was discovered in the rollback feature, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

CVE-2022-38774

Elastic Endpoint Security and Elastic Endgame for Windows contain a Local Privilege Escalation in the quarantine feature. Affected versions: Elastic Security up to 7.17.6 and 8.3.3; Elastic Endgame up to 3.62.2. Fixes are provided in Endpoint: 7.17.7 and 8.4.0; Endgame: 3.62.3. The advisory notes...

CVE-2022-38775

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...