CVE-2018-12989 - The report-viewing feature in Pearson VUE Certiport Console 8 and IQSystem 7 before 2018-06-26 mishandles child processes and consequently launches Internet Explorer or Microsoft Edge as Administrator, which allows local users to gain privileges

Back Back to CVE browser

MEDIUM

The report-viewing feature in Pearson VUE Certiport Console 8 and IQSystem 7 before 2018-06-26 mishandles child processes and consequently launches Internet Explorer or Microsoft Edge as Administrator, which allows local users to gain privileges

Published Aug 3, 2018

6.7

MEDIUM

CVSS 3.0

EPSS 0.31%

Description

The report-viewing feature in Pearson VUE Certiport Console 8 and IQSystem 7 before 2018-06-26 mishandles child processes and consequently launches Internet Explorer or Microsoft Edge as Administrator, which allows local users to gain privileges.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-281

References (2)

https://certiport.pearsonvue.com/Support/Console-system-updates
x_refsource_MISCVendor Advisory
https://computeco.de/2018-07-29_1.html
x_refsource_MISCMitigationThird Party Advisory

Link	Providers	Tags
https://certiport.pearsonvue.com/Support/Console-system-updates		x_refsource_MISCVendor Advisory
https://computeco.de/2018-07-29_1.html		x_refsource_MISCMitigationThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 3, 2018

Updated Aug 5, 2024

Reserved Jun 29, 2018

Link CVE-2018-12989

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-12989

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-12989