CVE-2024-14047 — Improper Link Resolution Before File Access ('Link Following') in Winlogbeat Leading to Arbitrary File Write and Deni…

CVE-2024-14047

Improper Link Resolution Before File Access ('Link Following') in Winlogbeat Leading to Arbitrary File Write and Denial of Service PUBLISHED

Description (CNA)

A local vulnerability in the Winlogbeat Windows installer caused runtime files to be placed in a directory writable by unprivileged users. A low-privileged attacker with existing access to the system could pre-position malicious filesystem links, causing a subsequent elevated Winlogbeat operation to write to or delete arbitrary files. Successful exploitation could result in a denial of service.

Affected (CNA)

Vendor / product	Versions
Elastic / Elastic Security	affected 7.6.0 through 8.12.2

CWE

CWE-59

References

https://discuss.elastic.co/t/winlogbeat-8-13-0-security-update-esa-2024-49/390044

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.