CVE-2018-1000209 - CVE House
Back to Database
Status published High CVE-2018-1000209

Sensu, Inc. Sensu Core version Before version 1.4.2-3 contains a...

Vulnerability Description

Sensu, Inc. Sensu Core version Before version 1.4.2-3 contains a Insecure Permissions vulnerability in Sensu Core on Windows platforms that can result in Unprivileged users may execute code in context of Sensu service account. This attack appear to be exploitable via Unprivileged user may place an arbitrary DLL in the c:\opt\sensu\embedded\bin directory in order to exploit standard Windows DLL load order behavior. This vulnerability appears to have been fixed in 1.4.2-3 and later.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-1000209

Credits & Attribution

No credits recorded in the NVD database.

References

More from sensu

View All →
CVE-2018-1000060
Sensu, Inc. Sensu Core version Before 1.2.0 & before commit...
Critical 9.8

Affected Vendor

Affected Software

sensu core
Vulnerable Versions:
0

Timeline

Official Publish: July 13th, 2018
Last Modified: September 17th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.