[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fPe3IczdUX8MYAPX0c61wonA5BQknYy3C1dY9UCR_VB4":3,"g5a-risk:CVE-2024-4454":136},{"success":4,"data":5,"meta":133},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":41,"epssPercentile":27,"epssTimeSeries":42,"severity":43,"affectedProducts":44,"affectedProductsCount":66,"references":67,"referencesCount":75,"weaknesses":76,"weaknessesCount":85,"isActivelyExploited":65,"cisaInfo":27,"otxData":27,"relatedBlogPosts":86,"seoMetadata":87,"configurations":112,"relatedVendorCves":131,"notableEvents":132},"CVE-2024-4454","What is CVE-2024-4454?","WithSecure Elements Endpoint Protection Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of WithSecure Elements Endpoint Protection. User interaction on the part of an administrator is required to exploit this vulnerability.\n\nThe specific flaw exists within the WithSecure plugin hosting service. By creating a symbolic link, an attacker can abuse the service to create a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-23035.","WithSecure Elements Endpoint Protection Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privil...","2024-05-22T20:15:10.13","2026-06-17T08:01:54.773",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":39,"CVSSMetricV40":40},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","LOCAL","LOW","NONE","REQUIRED","UNCHANGED","HIGH",null,1.8,5.9,[31],{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":38,"ImpactScore":29},"zdi-disclosures@trendmicro.com","Secondary",{"Version":35,"VectorString":36,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":37,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.0","CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",7.3,1.3,[],[],0.00404,[41,41,41,41,41,41,41],"High",[45,50,54,57,60],{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"withsecure","client_security","15","cpe:2.3:a:withsecure:client_security:15:*:*:*:*:*:*:*",{"vendor":46,"product":51,"version":52,"criteria":53,"vulnerable":4},"elements_endpoint_protection","17","cpe:2.3:a:withsecure:elements_endpoint_protection:17:*:*:*:*:*:*:*",{"vendor":46,"product":55,"version":48,"criteria":56,"vulnerable":4},"email_and_server_security","cpe:2.3:a:withsecure:email_and_server_security:15:*:*:*:*:*:*:*",{"vendor":46,"product":58,"version":48,"criteria":59,"vulnerable":4},"server_security","cpe:2.3:a:withsecure:server_security:15:*:*:*:*:*:*:*",{"vendor":61,"product":62,"version":63,"criteria":64,"vulnerable":65},"microsoft","windows","-","cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",false,5,[68,73],{"url":69,"source":70,"tags":71},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-491\u002F","Zerodayinitiative",[72],"Third Party Advisory",{"url":69,"source":70,"tags":74},[72],2,[77],{"id":78,"name":79,"description":80,"extendedDescription":81,"status":82,"abstraction":83,"structure":84},"CWE-59","Improper Link Resolution Before File Access ('Link Following')","The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","","Draft","Base","Simple",1,[],{"title":88,"metaDescription":89,"keywords":90,"canonicalUrl":91,"structuredData":92},"What is CVE-2024-4454? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-4454, a high severity cyber security vulnerability from 2024. WithSecure Elements Endpoint Protection Link Following Local...","CVE-2024-4454, CVE-2024-4454 vulnerability, CVE-2024-4454 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, withsecure security, microsoft security, client_security vulnerability, elements_endpoint_protection vulnerability, email_and_server_security vulnerability, server_security vulnerability, windows vulnerability","\u002Fwhat-is\u002Fcve-2024-4454",{"@context":93,"@type":94,"headline":88,"description":89,"datePublished":10,"dateModified":11,"author":95,"publisher":99,"about":103,"mainEntityOfPage":107,"articleSection":110,"keywords":111},"https:\u002F\u002Fschema.org","TechArticle",{"@type":96,"name":97,"url":98},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":96,"name":97,"url":98,"logo":100},{"@type":101,"url":102},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":104,"name":6,"description":105,"additionalType":106},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":108,"@id":109},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-4454","Cybersecurity","CVE-2024-4454, CVE-2024-4454 vulnerability, CVE-2024-4454 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[113],{"Operator":114,"Negate":27,"Nodes":115},"AND",[116,127],{"Operator":117,"Negate":65,"CPEMatch":118},"OR",[119,121,123,125],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":120,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"1755AB17-E9C9-4616-98B4-843B75668CA4",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":122,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"3A96B0F0-1713-4621-A463-8FB513490F3B",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":124,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"2E1B31DD-3C88-4826-8E24-588FED197C5D",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":126,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"015D02AD-F46F-46DF-9CD8-E0DB78CE17DD",{"Operator":117,"Negate":65,"CPEMatch":128},[129],{"Vulnerable":65,"Criteria":64,"MatchCriteriaID":130,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A2572D17-1DE6-457B-99CC-64AFD54487EA",[],[],{"lastModified":11,"cacheTime":134,"version":135},1792255870042,"2.0",{"score":137,"band":138,"action":139,"scoredAt":140},47,"Medium","Plan remediation","2026-10-16T07:02:33.27221+00:00"]