PT-2026-60728 · Itms · Itms
CVE-2026-15380
·
Published
2026-07-17
·
Updated
2026-07-21
CVSS v4.0
5.1
Medium
| Vector | AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/S:N/AU:Y/R:A/V:C/RE:M/U:Red |
Name of the Vulnerable Software and Affected Versions
ITMS version 8.7.3
Description
A non-administrator interactive user can achieve full SYSTEM code execution. This is possible through a logic chain involving DCOM (Distributed Component Object Model, a Microsoft technology for communication between software components) and the task scheduler. This process does not require network access or memory corruption.
Recommendations
Update ITMS to a version newer than 8.7.3.
Fix
Improper Privilege Management
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Itms