CVE-2018-10959
First published: Wed Apr 17 2019(Updated: )
Avecto Defendpoint 4 prior to 4.4 SR6 and 5 prior to 5.1 SR1 has an Untrusted Search Path vulnerability, exploitable by modifying environment variables to trigger automatic elevation of an attacker's process launch.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Beyondtrust Avecto Defendpoint | >=4.0<4.4.267.0 | |
| Beyondtrust Avecto Defendpoint | >=5.0<5.1.149.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://hackandpwn.com/assets/2019-04-17-cve-2018-10959/Defendpoint_Windows_Client_Release_Notes_4.4.267.0_SR6.pdf
- https://hackandpwn.com/assets/2019-04-17-cve-2018-10959/Defendpoint_Windows_Client_Release_Notes_5.1.149.0_SR1.pdf
- https://hackandpwn.com/cve-2018-10959/
- https://www.beyondtrust.com/docs/release-notes/privilege-management/windows-and-mac/windows/pm-windows-4-4-sr6.pdf
- https://www.beyondtrust.com/docs/release-notes/privilege-management/windows-and-mac/windows/pm-windows-5-1.pdf
Frequently Asked Questions
What is CVE-2018-10959?
CVE-2018-10959 is a vulnerability in Avecto Defendpoint 4 prior to 4.4 SR6 and 5 prior to 5.1 SR1 that allows an attacker to elevate their privileges by modifying environment variables.
How does CVE-2018-10959 work?
CVE-2018-10959 works by exploiting an untrusted search path vulnerability in Avecto Defendpoint, where an attacker can modify environment variables to trigger automatic elevation of their process launch.
What is the severity of CVE-2018-10959?
CVE-2018-10959 has a severity rating of 7.5 (High).
Which versions of Avecto Defendpoint are affected by CVE-2018-10959?
Avecto Defendpoint versions prior to 4.4 SR6 and 5 prior to 5.1 SR1 are affected by CVE-2018-10959.
How can I fix CVE-2018-10959?
To fix CVE-2018-10959, it is recommended to update Avecto Defendpoint to version 4.4 SR6 or version 5.1 SR1 or newer.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/references
- agent/author
- agent/severity
- agent/last-modified-date
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- vendor/beyondtrust
- canonical/beyondtrust avecto defendpoint
- version/beyondtrust avecto defendpoint/4.0
- version/beyondtrust avecto defendpoint/5.0