CVE-2022-38775: elastic elastic endpoint security Improper Privilege Management

Vulnerability summary

CVE-2022-38775 is a high (CVSS 7.8) Improper Privilege Management vulnerability in elastic elastic endpoint security. EPSS estimates a 0.26% chance of exploitation in the next 30 days, higher than 16% of scored vulnerabilities.

Timeline

1. 24-01-2023
   PublishedVulnerability first disclosed.
2. 02-04-2025
   Last modifiedVulnerability information updated.

Description

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.

• CWE-269Improper Privilege ManagementThe product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.