CVE-2021-26909

概要

参考情報

• community.automox.com/t/cve-2021-26908-and-cve-201-26909-automox-agent-information-disclosure-vulnerabilities-fixed/1955 · Vendor Advisory
• rapid7.com/blog/post/2021/04/13/cve-2021-26908-and-cve-2021-26909-automox-agent-information-disclosure-fixed · Third Party Advisory

automox のその他の脆弱性

• CVE-2022-36122高 7.8The Automox Agent before 40 on Windows incorrectly sets permissions on key files.
• CVE-2022-27904高 7.0Automox Agent for macOS before version 39 was vulnerable to a time-of-check/time-of-use (TOCTOU) race-condition attack during the agent inst…
• CVE-2022-24308中 5.5Automox Agent prior to version 37 on Windows and Linux and Version 36 on OSX could allow for a non privileged user to obtain sensitive infor…
• CVE-2021-43326高 7.8Automox Agent before 32 on Windows incorrectly sets permissions on a temporary directory.
• CVE-2021-43325高 7.8Automox Agent 33 on Windows incorrectly sets permissions on a temporary directory. NOTE: this issue exists because of a CVE-2021-43326 regre…