The agent in OSSEC up to and including 3.1.0 on Windows allows local users to gain NT AUTHORITY\SYSTEM access via Directory Traversal by leveraging full access to the associated OSSEC server.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
ossec ossec |
||
wazuh wazuh |