Pronestor Health Monitoring 8.1.11.0 - Privilege Escalation

Pronestor Health Monitoring 8.1.11.0 - Privilege Escalation Summary The Pronestor service "PNHM" aka Health Monitoring or HealthMonitor before 8.1.12.0 has "BUILTIN\Users:IF" permissions for the "%PROGRAMFILESX86%\proNestor\Outlook add-in for Pronestor\PronestorHealthMonitor.exe" file, which allo...

Pronestor Health Monitoring Privilege Escalation

Summary The Pronestor service "PNHM" aka Health Monitoring or HealthMonitor before 8.1.12.0 has "BUILTIN\Users:IF" permissions for the "%PROGRAMFILESX86%\proNestor\Outlook add-in for Pronestor\PronestorHealthMonitor.exe" file, which allows local users to gain privileges via a Trojan horse...

CVE-2018-19113

Vulnerability summary (CVE-2018-19113) : The Pronestor Health Monitor add-in for Outlook (PNHM), prior to version 8.1.13.0, stores weak file permissions on the PronestorHealthMonitor.exe binary in the Program Files path: BUILTIN\Users:(I)(F). This enables local users to escalate to SYSTEM via a T...