Lakeside Software’s SysTrack LsiAgent Installer version 10.7.8 for Windows contains a local privilege escalation vulnerability which allows attackers SYSTEM level access.
The product creates a temporary file in a directory whose permissions allow unintended actors to determine the file’s existence or otherwise access that file.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Systrack_lsiagent | Lakesidesoftware | 10.7.8 (including) | 11.0 (excluding) |