Elevated Privileges Vulnerability in CapMon Access Manager 5.4.1.1005

Elevated Privileges Vulnerability in CapMon Access Manager 5.4.1.1005

CVE-2018-18255 · HIGH Severity

AV:L/AC:L/AU:N/C:C/I:C/A:C

An issue was discovered in CapMon Access Manager 5.4.1.1005. The client applications of AccessManagerCoreService.exe communicate with this server through named pipes. A user can initiate communication with the server by creating a named pipe and sending commands to achieve elevated privileges.

Learn more about our Cis Benchmark Audit For Server Software.