CVE-2022-38774

Published: Jan 24, 2023

Modified: Apr 2, 2025

PUBLISHED

Description

An issue was discovered in the quarantine feature of Elastic Endpoint Security and Elastic Endgame for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.

Vendor	Product	Versions
Elastic	Elastic Endpoint Security and Elastic Endgame Security	affected `Elastic Security versions up to 7.17.6 and 8.3.3 and Elastic Endgame versions up to 3.62.2`

Weaknesses (CWE)

CWE-269

References

https://www.elastic.co/community/security

https://discuss.elastic.co/t/endpoint-security-8-4-0-7-17-7-and-endgame-3-62-3-security-statement/323754

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2022-38774

Description

Affected Products

Weaknesses (CWE)

References