CVE-2018-16715

An issue was discovered in Absolute Software CTES Windows Agent through 1.0.0.1479

published September 8, 2018

CVSS
—
EPSS
1%
Percentile
58.1
In the wild
Unconfirmed
What it is

An issue was discovered in Absolute Software CTES Windows Agent through 1.0.0.1479. The security permissions on the %ProgramData%\CTES folder and sub-folders may allow write access to low-privileged user accounts. This allows unauthorized replacement of service program executable (EXE) or dynamically loadable library (DLL) files, causing elevated (SYSTEM) user access. Configuration control files or data files under this folder could also be similarly modified to affect service process behavior.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00861 · 58.1th percentile
Published
2018-09-08T10:00Z
EPSS history
Timeline
  • 08 SEP 10:00Z
    An issue was discovered in Absolute Software CTES Windows Agent through 1.0.0.1479
    cvelistv5