An administrative import function in Kiteworks Core did not verify that the requesting administrator was entitled to create the privileged integration credential being imported. A delegated administrator holding a single narrowly scoped administrative permission could therefore obtain full system administrator privileges, without any action by an existing system administrator.
Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Call or email us to get started.