CVE-2022-36174

ALTO 8.1CVE-2022-36174 · Published 12/09/2022 · updated 17/06/2026

En resumen

CVE-2022-36174 es una vulnerabilidad ALTO (CVSS 8.1) que afecta a freshservice agent (freshworks).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.53%, mayor que el 44.9% de las vulnerabilidades.
Solución: actualizar a 2.11.0, 3.3.0, 4.2.0 o posterior.

Package	Affected versions	Patched versions
freshservice agent freshworks	`< 2.11.0< 3.3.0< 4.2.0`	`2.11.03.3.04.2.0`

Description

FreshService Windows Agent < 2.11.0 and FreshService macOS Agent < 4.2.0 and FreshService Linux Agent < 3.3.0. are vulnerable to Broken integrity checking via the FreshAgent client and scheduled update service.

References

community.freshworks.com/product-updates/freshservice-release-notes-april-2022-23982 · Release Notes
public-exposure.inform.social/post/integrity-checking · Exploit

Más vulnerabilidades de freshservice agent

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free