Security Advisory

CVE-2019-12808

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-08-13 19:35:24
Last updated 2024-08-04 23:32:55
Assigner krcert
State PUBLISHED

Description

ALTOOLS update service 18.1 and earlier versions contains a local privilege escalation vulnerability due to insecure permission. An attacker can overwrite an executable that is launched as a service to exploit this vulnerability and execute arbitrary code with system privileges.