Description (CNA)
An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Elastic / Elastic Endpoint Security | affected Elastic Security versions up to 7.17.8 and 8.4.3 and Elastic Endgame versions up to 3.62.2 |
CWE
CWE-269
References
- https://www.elastic.co/community/security
- https://discuss.elastic.co/t/elastic-7-17-9-8-5-0-and-8-6-1-security-update/324661
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.