CVE-2021-43326

Description

References

• packetstormsecurity.com/files/165449/Automox-Agent-32-Local-Privilege-Escalation.html · Exploit
• community.automox.com/product-updates-4/cve-2021-43326-and-cve-2021-43325-local-privilege-escalation-in-automox-agent-windows-only-1636 · Vendor Advisory
• support.automox.com/help/release-notes · Release Notes

automox의 다른 취약점

• CVE-2022-36122높음 7.8The Automox Agent before 40 on Windows incorrectly sets permissions on key files.
• CVE-2022-27904높음 7.0Automox Agent for macOS before version 39 was vulnerable to a time-of-check/time-of-use (TOCTOU) race-condition attack during the agent inst…
• CVE-2022-24308보통 5.5Automox Agent prior to version 37 on Windows and Linux and Version 36 on OSX could allow for a non privileged user to obtain sensitive infor…
• CVE-2021-43325높음 7.8Automox Agent 33 on Windows incorrectly sets permissions on a temporary directory. NOTE: this issue exists because of a CVE-2021-43326 regre…
• CVE-2021-26909보통 5.3Automox Agent prior to version 31 uses an insufficiently protected S3 bucket endpoint for storing sensitive files, which could be brute-forc…