APM Server Uncontrolled Search Path Element can lead to Local Privilege Escalation (LPE) when using the Windows Installer (ESA-2025-01)
An uncontrolled search path element vulnerability can lead to local privilege Escalation (LPE) via Insecure Directory Permissions. The vulnerability arises from improper handling of directory permissions. An attacker with local access may exploit this flaw to move and delete arbitrary files, potentially gaining SYSTEM privileges.
Affected Versions:
APM Server version up to and including 8.16.2, and up to and including 8.17.0.
Affected Configurations:
The issue only affects APM Server when installed through the install-service script for Windows.
Solutions and Mitigations:
The issue is resolved in version 8.16.3 and 8.17.1.
Severity: CVSSv3.1: 7.0 (High) - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVE ID: CVE-2025-0712
________________________________________________________________________________________________
Change log
2025-08-21: Updated wording on the “Affected Configurations” to clearly state this is caused by the Windows install script.