CVE-2018-12989

The report-viewing feature in Pearson VUE Certiport Console 8 and IQSystem 7 before 2018-06-26 mishandles child processes and consequently launches Internet Explorer or Microsoft Edge as Administrator, which allows local users to gain privileges.

Score

CVSS 3.0 6.7 Medium

Status

Modified - cve@mitre.org

Published

2018-08-03

Last modified

2024-08-05

Weaknesses

CWE-281

Affected products

• Console 8 (Pearsonvue)
• Iqsystem 7 (Pearsonvue)

References

• https://certiport.pearsonvue.com/Support/Console-system-updates
• https://computeco.de/2018-07-29_1.html