Elevation of Privilege

This document will explain you about the vulnerability reported by NCC Group Security Advisory which allows,

1. Unauthenticated users to execute queries (Query type restriction by-pass) on Endpoint Central MSP Server.
2. Users to execute any web executable throughout the network using directory traversal or file type restriction by-pass.

What was the Problem?

1. Unauthenticated users were able execute queries on Endpoint Central MSP Server.
2. Endpoint Central MSP users can execute any web executables as scripts throughout the network computers.

How do I fix it?

This has been identified and fixed, in the Endpoint Central MSP build # 10.0.183 . Upgrade to the latest build for these issues to be fixed.

Keywords: Query Execution, Security Updates, Vulnerabilities and Fixes.