CVE-2024-2658: Local privilege escalation in FlexNet Publisher
Description
A misconfiguration in lmadmin.exe of FlexNet Publisher versions prior to 2024 R1 (11.19.6.0) allows the OpenSSL configuration file to load from a non-existent directory. An unauthorized, locally authenticated user with low privileges can potentially create the directory and load a specially crafted openssl.conf file leading to the execution of a malicious DLL (Dynamic-Link Library) with elevated privileges.
Classification
CVE ID: CVE-2024-2658
CVSS Base Severity: HIGH
CVSS Base Score: 8.5
CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected Products
Vendor: Flexera
Product: FlexNet Publisher
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.05% (probability of being exploited)
EPSS Percentile: 19.06% (scored less or equal to compared to others)
EPSS Date: 2025-02-28 (when was this score calculated)
References
https://community.flexera.com/s/article/cve-2024-2658-flexnet-publisher-potential-local-privilege-escalation-issuehttps://www.zerodayinitiative.com/advisories/ZDI-24-359/