CVE-2018-18253

CapMon Access Manager 5.4.1.1005 is affected. The issue centers on CALRunElevated.exe: it temporarily adds an unprivileged user to the local Administrators group to run a single command, but if the command crashes the user may remain in the Administrators group, and a race condition exists in all...

CVE-2018-18253

An issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe attempts to enforce access control by adding an unprivileged user to the local Administrators group for a very short time to execute a single command. However, the user is left in that group if the command crashes, an...