CVE-2018-18255

An issue was discovered in CapMon Access Manager 5.4.1.1005. The client applications of AccessManagerCoreService.exe communicate with this server through named pipes. A user can initiate communication with the server by creating a named pipe and sending commands to achieve elevated privileges.

Score

CVSS 3.0 7.8 High

Status

Modified - cve@mitre.org

Published

2019-03-15

Last modified

2024-08-05

Weaknesses

CWE-287

Affected products

• Access Manager (Capmon)

References

• https://improsec.com/tech-blog/cam1