FlexNet Publisher Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in FlexNet Publisher versions prior to 2024 R1 (11.19.6.0). The issue arises from a misconfiguration in lmadmin.exe, which allows the OpenSSL configuration file to be loaded from a non-existent directory. An unauthorized, locally authenticated user with low privileges could potentially create the directory and load a specially crafted openssl.conf file, leading to the execution of a malicious DLL with elevated privileges.

Impact

Exploitation of this vulnerability could allow local attackers to escalate privileges and execute arbitrary code in the context of the service account.

Remediation

Flexera Software has released an update to address this vulnerability. Users can refer to the FlexNet Publisher Knowledge Base for more details.