CVE-2024-4454CWE-59

WithSecure Elements Endpoint Protection Link Following Local Privilege Escalation Vulnerability

High · published May 22, 2024

CVSS v3.0
7.3
EPSS
0%
Percentile
33.5
In the wild
Unconfirmed
What it is

WithSecure Elements Endpoint Protection Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of WithSecure Elements Endpoint Protection. User interaction on the part of an administrator is required to exploit this vulnerability.

The specific flaw exists within the WithSecure plugin hosting service. By creating a symbolic link, an attacker can abuse the service to create a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-23035.

The record
Technical detail
CVSS v3.0
7.3 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00404 · 33.5th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2024-05-22T19:13Z
EPSS history
Timeline
  • 22 MAY 19:13Z
    WithSecure Elements Endpoint Protection Link Following Local Privilege Escalation Vulnerability
    cvelistv5