← Back

CVE-2022-23714

nvd nist
Published: Jul 6, 2022Modified: Nov 21, 2024

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

A local privilege escalation (LPE) issue was discovered in the ransomware canaries features of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.

Affected (2)

Elastic
1 product
Endpoint Security
Configuration A
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Elastic
Endpoint Security
From 7.13.0 to 7.17.4
Endpoint Security
From 8.0.0 to 8.2.3
Running on/withPlatform Versions
Microsoft
Windows
All versions

Related CWEs

CWE-264
CWE-264

References (4)

Source: security@elastic.co
MitigationVendor Advisory
Source: security@elastic.co
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.