1. Home
  2. CVE Database
  3. CVE-2018-18253
HIGH · 7.0

CVE-2018-18253

An issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe attempts to enforce access control by adding an unprivileged user to the local Administrators group for a very short tim...

Vulnerability Description

An issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe attempts to enforce access control by adding an unprivileged user to the local Administrators group for a very short time to execute a single command. However, the user is left in that group if the command crashes, and there is also a race condition in all cases.

CVSS Score

7.0

HIGH

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
CapmonAccess Manager<= 5.4.1.1005

Related Weaknesses (CWE)

CWE-362

References

FAQ

What is CVE-2018-18253?

CVE-2018-18253 is a vulnerability with a CVSS score of 7.0 (HIGH). An issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe attempts to enforce access control by adding an unprivileged user to the local Administrators group for a very short tim...

How severe is CVE-2018-18253?

CVE-2018-18253 has been rated HIGH with a CVSS base score of 7.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-18253?

Check the references section above for vendor advisories and patch information. Affected products include: Capmon Access Manager.