CVE-2021-28098

CVE-2021-28098 is a local privilege escalation vulnerability affecting Forescout CounterACT before version 8.1.4. It arises from insecure logging practices where SecureConnector, running with administrative privileges, writes logs to a file with excessive permissions. An attacker can exploit this by using a symbolic link to redirect log output to a privileged system directory, enabling DLL hijacking. This vulnerability has a CVSS score of 7.8 (High), indicating a significant impact on confidentiality, integrity, and availability, with low attack complexity. There is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion.