.NET Impersonation Vulnerability in upKeeper Solutions upKeeper Instant Privilege Access

A vulnerability exists in upKeeper Solutions upKeeper Instant Privilege Access versions through 1.5.0, due to a .NET misconfiguration that allows impersonation. This vulnerability enables the hijacking of a privileged thread of execution. It allows users to send and collect information from a computer running the upKeeper Instant Privilege Access client service.

Impact

Exploitation of this vulnerability could lead to unauthorized access to privileged threads of execution, allowing for the hijacking of these threads and potentially misuse of privileges.

Remediation

Users can update the upKeeper Instant Privilege Access client to version 1.6.0.4576 or later to address this vulnerability.