VulnerabilityModified

CVE-2018-16715

The security permissions on the %ProgramData%\CTES folder and sub-folders may allow write access to low-privileged user accounts.

HIGH 8.8EPSS 0.86%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.86%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

An issue was discovered in Absolute Software CTES Windows Agent through 1.0.0.1479. The security permissions on the %ProgramData%\CTES folder and sub-folders may allow write access to low-privileged user accounts. This allows unauthorized replacement of service program executable (EXE) or dynamically loadable library (DLL) files, causing elevated (SYSTEM) user access. Configuration control files or data files under this folder could also be similarly modified to affect service process behavior.

CVSS 3.0: 8.8 HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.86% probability · 56th percentile
CISA KEV: Not listed
Weakness: CWE-732
Affected: absolute/ctes windows agent
Source: cve@mitre.org

References

https://community.absolute.com/s/article/Absolute-Security-Bulletin-ASB1Vendor Advisory
https://community.absolute.com/s/article/Absolute-Security-Bulletin-ASB1Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.