NetSight
high7.0

CVE-2018-18253

An issue was discovered in CapMon Access Manager 5.4.1.1005.

Impact

An issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe attempts to enforce access control by adding an unprivileged user to the local Administrators group for a very short time to execute a single command. However, the user is left in that group if the command crashes, and there is also a race condition in all cases.

Affected products

VendorProductAffected versions
CapmonAccess Manager
through 5.4.1.1005

Weakness classification

References