Lucene search

K
zdiSimon Zuckerbraun of Trend Micro Zero Day InitiativeZDI-18-998
HistorySep 06, 2018 - 12:00 a.m.

(0Day) Cisco WebEx Network Recording Player Improper Access Control Privilege Escalation Vulnerability

2018-09-0600:00:00
Simon Zuckerbraun of Trend Micro Zero Day Initiative
www.zerodayinitiative.com
26

EPSS

0.005

Percentile

76.8%

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Cisco WebEx Network Recording Player. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists in the access control that the product installer sets on the product’s binaries. This allows any local user to replace the product’s binaries with malicious replacements. An attacker can leverage this vulnerability to escalate privileges to the level of some other user of the system, such as an administrator.

EPSS

0.005

Percentile

76.8%

Related for ZDI-18-998