| Package | Affected versions | Patched versions |
|---|---|---|
| drivelock | ≥ 24.1, ≤ 24.1.4≥ 24.2, ≤ 24.2.8≥ 25.1, ≤ 25.1.6 |
An issue was discovered in DriveLock 24.1 through 24.1.*, 24.2 through 24.2.*, and 25.1 through 25.1.*. An incomplete configuration (agent authentication) in DriveLock tenant allows attackers to impersonate any DriveLock agent on the network against the DES (DriveLock Enterprise Service).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free