CVE-2019-19460: Medium severity saltosystem proaccess space vulnerability
An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. The product's webserver runs as a Windows service with local SYSTEM permissions by default. This is against the principle of least privilege. An attacker who is able to exploit CVE-2019-19458 or CVE-2019-19459 is basically able to write to every single path on the file system, because the webserver is running with the highest privileges available.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-19460?
CVE-2019-19460 is a vulnerability discovered in SALTO ProAccess SPACE 5.4.3.0 where the product's webserver runs as a Windows service with local SYSTEM permissions, against the principle of least privilege.
What is the severity of CVE-2019-19460?
CVE-2019-19460 has a severity level of 5.5 (medium).
How does CVE-2019-19460 affect the Saltosystem Proaccess Space software?
CVE-2019-19460 affects Saltosystem Proaccess Space versions up to and including 5.5.
Is Microsoft Windows vulnerable to CVE-2019-19460?
No, Microsoft Windows is not vulnerable to CVE-2019-19460.
How can I fix CVE-2019-19460?
To fix CVE-2019-19460, update the SALTO ProAccess SPACE software to a version beyond 5.5.