CVE-2019-25305
BaseFortify
Publication date: 2026-02-06
Last updated on: 2026-02-06
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-428 | The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
[{'type': 'paragraph', 'content': "CVE-2019-25305 is an unquoted service path vulnerability found in JumpStart version 0.6.0.0, specifically in the 'jswpbapi' service. This service runs with LocalSystem privileges on Windows systems."}, {'type': 'paragraph', 'content': 'Because the service path contains spaces and is not enclosed in quotes, an attacker with local access can exploit this by placing a malicious executable in a path segment. When the service starts, it may execute this malicious code with elevated system permissions.'}, {'type': 'paragraph', 'content': 'This vulnerability is classified under CWE-428 (Unquoted Search Path or Element) and allows privilege escalation by executing arbitrary code under the highly privileged LocalSystem account.'}] [2, 3]
How can this vulnerability impact me? :
This vulnerability can be exploited locally to escalate privileges on the affected Windows system.
An attacker with standard user access can inject malicious code that will be executed with LocalSystem privileges, which are the highest level of permissions on a Windows system.
This can lead to full system compromise, allowing the attacker to read, modify, or delete sensitive data, install persistent malware, or disrupt system availability.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
[{'type': 'paragraph', 'content': 'This vulnerability can be detected by checking the service configuration for unquoted paths and verifying directory permissions.'}, {'type': 'list_item', 'content': 'Use the command "sc qc jswpbapi" to check the service configuration and confirm if the executable path is unquoted.'}, {'type': 'list_item', 'content': 'Use the command "icacls" on the service directory (e.g., "C:\\Program Files (x86)\\Jumpstart") to verify directory permissions and see if standard users have read and execute access.'}] [2]
What immediate steps should I take to mitigate this vulnerability?
I don't know