CVEvulnerability
CVE-2022-23714
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-07-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
A local privilege escalation (LPE) issue was discovered in the ransomware canaries features of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.
Affected configurations
• elastic endpoint security (>= 7.13.0 <= 7.17.4)
• elastic endpoint security (>= 8.0.0 <= 8.2.3)
Related
Weakness · not in database (1)
References
- https://discuss.elastic.co/t/elastic-8-3-1-8-3-0-and-7-17-5-security-update/308613 Mitigation, Vendor Advisory
- https://www.elastic.co/community/security Vendor Advisory
- https://discuss.elastic.co/t/elastic-8-3-1-8-3-0-and-7-17-5-security-update/308613 Mitigation, Vendor Advisory
- https://www.elastic.co/community/security Vendor Advisory