# Elevation of Privilege Vulnerability

This document explains the CVE-2019-12133 privilege-elevation vulnerability that have been reported.

Vulnerability ID : CVE-2019-12133  
Update Release build : 100335  
Update Release Date : 20-June-2019  
Reported by: Hashim Jawad from ACTIVELabs

## What was the problem?

Improper permissions of `C:\ManageEngine` directory which allowed non-privileged users to escalate privileges to `NT AUTHORITY\SYSTEM`.

## How do I fix it?

These vulnerabilities have been identified and fixed. To apply the fix, follow the steps mentioned below:

1. Log in to your Vulnerability Manager Plus console, click on your current build number on the top right corner.
2. You can find the latest build applicable to you. Download the PPM and update.

**Keywords:** Query Execution, Security Updates, Vulnerabilities and Fixes.