CVE-2018-18253

An issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe attempts to enforce access control by adding an unprivileged user to the local Administrators group for a very short time to execute a single command. However, the user is left in that group if the command crashes, and there is also a race condition in all cases.

Score

CVSS 3.0 7.0 High

Status

Modified - cve@mitre.org

Published

2019-03-15

Last modified

2024-08-05

Weaknesses

CWE-362

Affected products

• Access Manager (Capmon)

References

• https://improsec.com/tech-blog/cam1