CVE-2019-19620

LOW

SecureWorks Red Cloak Windows Agent <2.0.7.9 - Auth Bypass

Title source: llm
STIX 2.1

Description

In SecureWorks Red Cloak Windows Agent before 2.0.7.9, a local user can bypass the generation of telemetry alerts by removing NT AUTHORITY\SYSTEM permissions from a file. This is limited in scope to the collection of process-execution telemetry, for executions against specific files where the SYSTEM user was denied access to the source file.

References (2)

Core 2

Scores

CVSS v3 3.3
EPSS 0.0003
EPSS Percentile 9.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Details

CWE
CWE-281
Status published
Products (1)
dell/red_cloak_windows_agent < 2.0.7.9
Published Dec 06, 2019
Tracked Since Feb 18, 2026