CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Permissions Privileges and Access Controls
Summary: an unauthenticated privilege escalation exists in sailpoint desktop password reset 7.2. a user with local access to only the windows logon screen can escalate their privileges to nt authority\system. an attacker would need local access to the machine for a successful exploit. the attacker must disconnect the computer from the local network / wan and connect it to an internet facing access point / network. at that point, the attacker can execute the password-reset functionality, which will expose a web browser. browsing to a site that calls local windows system functions (e.g., file upload) will expose the local file system. from there an attacker can launch a privileged command shell.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-08-20
Last Modified Date: 2019-08-30