CVE-2019-17043

An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the best1collect.exe SUID binary could allow an attacker to elevate his/her privileges to the ones of the "patrol" user by specially crafting a shared library .so file that will be loaded during execution.

Score

CVSS 3.1 7.8 High

Status

Modified - cve@mitre.org

Published

2019-10-14

Last modified

2024-08-05

Weaknesses

CWE-276

Affected products

• Patrol Agent (Bmc)

References

• https://github.com/blogresponder/BMC-Patrol-Agent-local-root-privilege-escalation
• https://twitter.com/whira_wr