CVE-2019-19793

HIGH

Cyxtera AppGate SDP 4.1.0-4.3.1 - Privilege Escalation via TOCTOU Race Condition

Title source: llm
STIX 2.1

Description

In Cyxtera AppGate SDP Client 4.1.x through 4.3.x before 4.3.2 on Windows, a local or remote user from the same domain can gain privileges.

References (2)

Core 2
Core References
Various Sources x_refsource_misc
https://danishcyberdefence.dk/blog/appgate_part1

Scores

CVSS v3 8.8
EPSS 0.0096
EPSS Percentile 57.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-367
Status published
Products (1)
cyxtera/appgate_sdp 4.1.0 - 4.3.2
Published Dec 13, 2019
Tracked Since Feb 18, 2026