CVE-2018-16715: High severity absolute computrace agent vulnerability
An issue was discovered in Absolute Software CTES Windows Agent through 1.0.0.1479. The security permissions on the %ProgramData%\CTES folder and sub-folders may allow write access to low-privileged user accounts. This allows unauthorized replacement of service program executable (EXE) or dynamically loadable library (DLL) files, causing elevated (SYSTEM) user access. Configuration control files or data files under this folder could also be similarly modified to affect service process behavior.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-16715?
CVE-2018-16715 is considered to have moderate severity due to the potential for unauthorized access to critical system files.
How do I fix CVE-2018-16715?
To fix CVE-2018-16715, ensure that the security permissions on the %ProgramData%\CTES folder restrict write access to low-privileged user accounts.
What systems are affected by CVE-2018-16715?
CVE-2018-16715 affects Absolute Software CTES Windows Agent versions up to and including 1.0.0.1479.
What kind of attacks can CVE-2018-16715 enable?
CVE-2018-16715 can enable low-privileged users to replace service executable files, potentially leading to privilege escalation or malware execution.
Is there a patch available for CVE-2018-16715?
Yes, it is recommended to update Absolute Software CTES Windows Agent to the latest version beyond 1.0.0.1479 to mitigate the vulnerability.