← Back

CVE-2022-38774

nvd nist
Published: Jan 26, 2023Modified: Apr 2, 2025

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

An issue was discovered in the quarantine feature of Elastic Endpoint Security and Elastic Endgame for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.

Affected (3)

Elastic
2 products
Endgame
Endpoint Security
Configuration A
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Endgame
Up to 3.62.2
Elastic
Endpoint Security
Before 7.17.7
Endpoint Security
From 8.0.0 to 8.4.0
Running on/withPlatform Versions
Microsoft
Windows
All versions

Related CWEs

CWE-269
Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (4)

Source: security@elastic.co
Vendor Advisory
Source: security@elastic.co
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.