Description
An issue was discovered in the quarantine feature of Elastic Endpoint Security and Elastic Endgame for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected products
- Elastic / Elastic Endpoint Security and Elastic Endgame SecurityElastic Security versions up to 7.17.6 and 8.3.3 and Elastic Endgame versions up to 3.62.2 – Elastic Security versions up to 7.17.6 and 8.3.3 and Elastic Endgame versions up to 3.62.2