privilege vulnerabilities and exploits

(subscribe to this query)

pmmasterd in Quest Privilege Manager prior to 6.0.0.061, when configured as a policy server, allows remote malicious users to write to arbitrary files and consequently execute arbitrary code with root privileges via an ACT_NEWFILESENT action.

Quest Privilege Manager 6.0.0-27 Quest Privilege Manager 6.0.0-50

1 EDB exploit

The Windows component of Centrify Authentication and Privilege Elevation Services 3.4.0, 3.4.1, 3.4.2, 3.4.3, 3.5.0, 3.5.1 (18.8), 3.5.2 (18.11), and 3.6.0 (19.6) does not properly handle an unspecified exception during use of partially trusted assemblies to serialize input data,...

Centrify Authentication Service 3.4.0 Centrify Authentication Service 3.4.1 Centrify Authentication Service 3.4.2 Centrify Authentication Service 3.4.3 Centrify Authentication Service 3.5.0 Centrify Authentication Service 3.5.1 Centrify Authentication Service 3.5.2 Centrify Authentication Service 3.6.0 Centrify Privilege Elevation Service 3.4.0 Centrify Privilege Elevation Service 3.4.1 Centrify Privilege Elevation Service 3.4.2 Centrify Privilege Elevation Service 3.4.3

An issue exists in BeyondTrust Privilege Management for Windows up to and including 5.6. When specifying a program to elevate, it can typically be found within the Program Files (x86) folder and therefore uses the %ProgramFiles(x86)% environment variable. However, when this same ...

Beyondtrust Privilege Management For Windows Beyondtrust Privilege Management For Windows 5.6

An issue exists in BeyondTrust Privilege Management for Windows up to and including 5.6. When adding the Add Admin token to a process, and specifying that it runs at medium integrity with the user owning the process, this security token can be stolen and applied to arbitrary proc...

Beyondtrust Privilege Management For Windows Beyondtrust Privilege Management For Windows 5.6

BeyondTrust Privilege Management for Windows and Mac (aka PMWM; formerly Avecto Defendpoint) 5.1 up to and including 5.5 prior to 5.5 SR1 mishandles command-line arguments with PowerShell .ps1 file extensions present, leading to a DefendpointService.exe crash.

Beyondtrust Privilege Management For Windows And Mac Beyondtrust Privilege Management For Windows And Mac 5.5

In CyberArk Endpoint Privilege Manager (formerly Viewfinity), Privilege Escalation is possible if the attacker has one process that executes as Admin.

Cyberark Endpoint Privilege Manager -

A buffer overflow in the kernel driver CybKernelTracker.sys in CyberArk Endpoint Privilege Manager versions before 10.7 allows an attacker (without Administrator privileges) to escalate privileges or crash the machine by loading an image, such as a DLL, with a long path.

Cyberark Endpoint Privilege Manager

CyberArk Endpoint Privilege Manager (EPM) up to and including 11.5.3.328 prior to 2021-12-20 allows a local user to gain elevated privileges via a Trojan horse Procmon64.exe in the user's Temp directory.

Cyberark Endpoint Privilege Manager

CyberArk Endpoint Privilege Manager 10.2.1.603 and previous versions allows an attacker (who is able to edit permissions of a file) to bypass intended access restrictions and execute blocked applications.

Cyberark Endpoint Privilege Manager

1 EDB exploit

IBM Security Sevret Server (IBM Security Verify Privilege Manager 10.8.2) is vulnerable to a buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and execute arbitrary code on the system or cause the system to crash. IBM X-Force ID: 184917...

Ibm Security Verify Privilege Manager

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook