CVE-2019-12889

CVE-2019-12889 is an unauthenticated privilege escalation vulnerability affecting SailPoint Desktop Password Reset 7.2. It allows a local attacker with access to the Windows logon screen to elevate privileges to NT AUTHORITY\System. The attack requires the machine to be disconnected from its network and connected to an internet-facing access point, enabling the attacker to leverage the password reset function to expose a web browser and subsequently a privileged command shell. This vulnerability is rated High severity (CVSS 7.0) due to its potential for complete compromise of confidentiality, integrity, and availability, despite requiring high attack complexity and local access. The EPSS score is low, indicating a low probability of exploitation in the wild. Currently, there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE. It is not listed in CISA's KEV catalog or Hot List.