CVE-2020-15838

概要

参考情報

• dbeta.com/2020/10/05/PrivilegeEscalationInAutomateAgent · Third Party Advisory
• connectwise.com/company/trust/security-bulletins · Third Party Advisory

automate のその他の脆弱性

• CVE-2026-9089高 8.8The ConnectWise Automate™ Agent does not fully verify the authenticity of components obtained during plugin loading and self-update operatio…
• CVE-2026-6066高 7.1ConnectWise has released a security update for ConnectWise Automate™ that addresses a behavior in the ConnectWise Automate Solution Center w…
• CVE-2025-11493高 7.5The ConnectWise Automate Agent does not fully verify the authenticity of files downloaded from the server, such as updates, dependencies, an…
• CVE-2025-11492高 7.5In the ConnectWise Automate Agent, communications could be configured to use HTTP instead of HTTPS. In such cases, an on-path threat actor w…
• CVE-2023-23130中 5.9Connectwise Automate 2022.11 is vulnerable to Cleartext authentication. Authentication is being done via HTTP (cleartext) with SSL disabled.…