cvedb.io
CVE-2018-19666
HIGH · CVSS 7.8
EPSS exploitation probability: 0%
Published 2018-11-29T08:29:00.397 · Last modified 2026-06-17T01:49:42.787

Summary

The agent in OSSEC through 3.1.0 on Windows allows local users to gain NT AUTHORITY\SYSTEM access via Directory Traversal by leveraging full access to the associated OSSEC server.

Affected products

ossec — ossec

Does this affect you?

Add your gear to cvedb and we'll alert you only when ossec ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.