CVE-2019-17201

FastTrack Admin By Request 6.1.0.0 has a privilege-escalation flaw in its elevation flow. The AdminByRequest.exe interface communicates with the underlying service Audckq32.exe via a .NET named pipe. The service relies on client-side validation and performs no local checks for elevation requests,...

CVE-2019-17202

CVE-2019-17202 affects FastTrack Admin By Request 6.1.0.0. The vulnerability arises in the elevation flow: users without direct access to elevation are prompted for a PIN via a challenge–response. The challenge response uses a simple algorithm that can be emulated with data (customer ID and devic...