{"uuid": "3b0c407b-ed98-40b5-9032-b9d00c646dfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50590", "type": "seen", "source": "https://t.me/cvedetector/10197", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50590 - Elefant Windows Privilege Escalation vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50590 \nPublished : Nov. 8, 2024, 12:15 p.m. | 29\u00a0minutes ago \nDescription : Attackers with local access to the medical office computer can   \nescalate their Windows user privileges to \"NT AUTHORITY\\SYSTEM\" by   \noverwriting one of two Elefant service binaries with weak permissions.\u00a0The default installation directory of Elefant is \"C:\\Elefant1\" which is   \nwritable for all users. In addition, the Elefant installer registers two  \n Firebird database services which are running as \u201cNT AUTHORITY\\SYSTEM\u201d.\u00a0  \n  \nPath: C:\\Elefant1\\Firebird_2\\bin\\fbserver.exe  \n  \nPath: C:\\Elefant1\\Firebird_2\\bin\\fbguard.exe  \n  \n  \nBoth service binaries are user writable. This means that a local   \nattacker can rename one of the service binaries, replace the service   \nexecutable with a new executable, and then restart the system. Once the   \nsystem has rebooted, the new service binary is executed as \"NT   \nAUTHORITY\\SYSTEM\". \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T13:50:42.000000Z"}