| Package | Affected versions | Patched versions |
|---|---|---|
| core privileged access manager server | ≥ 8.1.0.0, < 8.1.0.23≥ 9.0.0.0, < 9.0.0.5 | 8.1.0.239.0.0.5 |
Fortra's Core Privileged Access Manager (BoKS) contains an OS command injection vulnerability in the boks_autoregisterd service. A remote attacker with network access to the service may be able to cause commands to be executed with the privileges of the service during the autoregistration processing.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free