| Package | Affected versions | Patched versions |
|---|---|---|
| assets discovery cloud | ≥ 1.0.0, < 3.2.0 | 3.2.0 |
| assets discovery data center | ≥ 1.0.0, ≤ 3.1.11≥ 6.0.0, < 6.2.0 | 6.2.0 |
| assets discovery data server | ≥ 1.0.0, ≤ 3.1.11≥ 6.0.0, < 6.2.0 | 6.2.0 |
This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery agent installed. The vulnerability exists between the Assets Discovery application (formerly known as Insight Discovery) and the Assets Discovery agent.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free