CVE-2019-19460

An issue was discovered in SALTO ProAccess SPACE 5.4.3.0

published December 3, 2019

CVSS
—
EPSS
0%
Percentile
35.0
In the wild
Unconfirmed
What it is

An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. The product's webserver runs as a Windows service with local SYSTEM permissions by default. This is against the principle of least privilege. An attacker who is able to exploit CVE-2019-19458 or CVE-2019-19459 is basically able to write to every single path on the file system, because the webserver is running with the highest privileges available.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00417 · 35.0th percentile
Published
2019-12-03T19:00Z
EPSS history
Timeline
  • 03 DEC 19:00Z
    An issue was discovered in SALTO ProAccess SPACE 5.4.3.0
    cvelistv5