CVE-2024-4454: WithSecure Elements Endpoint Protection Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of WithSecure Elements Endpoint Protection. User interaction on the part of an administrator is required to exploit this vulnerability. The specific flaw exists within the WithSecure plugin hosting service. By creating a symbolic link, an attacker can abuse the service to create a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-4454?
CVE-2024-4454 is rated as a high severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2024-4454?
To address CVE-2024-4454, apply the latest security updates provided by WithSecure for Elements Endpoint Protection.
Who is affected by CVE-2024-4454?
CVE-2024-4454 affects installations of WithSecure Elements Endpoint Protection that allow local attackers to exploit the vulnerability.
Does CVE-2024-4454 require user interaction for exploitation?
Yes, exploiting CVE-2024-4454 requires user interaction from an administrator.
What does CVE-2024-4454 allow attackers to do?
CVE-2024-4454 allows local attackers to escalate their privileges on systems running the affected software.