ByteOS Network

NVD Vulnerability Details :

CVE-2021-28098

Analyzed

Source-cve@mitre.org

Published At-14 Apr, 2021 | 15:15

Updated At-28 Jun, 2022 | 14:11

An issue was discovered in Forescout CounterACT before 8.1.4. A local privilege escalation vulnerability is present in the logging function. SecureConnector runs with administrative privileges and writes logs entries to a file in %PROGRAMDATA%\ForeScout SecureConnector\ that has full permissions for the Everyone group. Using a symbolic link allows an attacker to point the log file to a privileged location such as %WINDIR%\System32. The resulting log file adopts the file permissions of the source of the symbolic link (in this case, the Everyone group). The log file in System32 can be replaced and renamed with a malicious DLL for DLL hijacking.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	4.4	MEDIUM	AV:L/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

Forescout Technologies, Inc.

>>counteract>>Versions before 8.1.4(exclusive)

cpe:2.3:a:forescout:counteract:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-427	Primary	nvd@nist.gov
CWE-59	Primary	nvd@nist.gov
CWE-732	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://docs.forescout.com	cve@mitre.org	Vendor Advisory
https://jordanpotti.com/2021/03/30/forescout-priv-esc-folder-permissions/	cve@mitre.org	Exploit Third Party Advisory
https://www.adversis.io/research/2021/3/30/forescout-secure-connector-local-privilege-escalation	cve@mitre.org	Exploit Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History