Cisco Umbrella Enterprise Roaming Client and Enterprise Roaming Module Privilege Escalation Vulnerability

A vulnerability in the Cisco Umbrella Enterprise Roaming Client (ERC) could allow an authenticated, local attacker to elevate privileges to Administrator. To exploit the vulnerability, the attacker must authenticate with valid local user credentials. This vulnerability is due to improper implementation of file system permissions, which could allow non-administrative users to place files within restricted directories. An attacker could exploit this vulnerability by placing an executable file within the restricted directory, which when executed by the ERC client, would run with Administrator privileges.

N/A

权限、特权和访问控制

Cisco Umbrella Enterprise Roaming Client和Roaming Module 权限许可和访问控制漏洞

Cisco Umbrella Enterprise Roaming Client（ERC）和Roaming Module都是美国思科（Cisco）公司的产品。Cisco Umbrella Enterprise Roaming Client（ERC）是一款防火墙安全客户端。Roaming Module是一个漫游控制模块。 Cisco Umbrella ERC 2.1.118之前版本和Roaming Module 4.6.1098之前版本中存在权限许可和访问控制漏洞，该漏洞源于程序没有正确的实现文件系统权限，

N/A

N/A