CVE-2020-15838

Mô tả

Tham khảo

• dbeta.com/2020/10/05/PrivilegeEscalationInAutomateAgent · Third Party Advisory
• connectwise.com/company/trust/security-bulletins · Third Party Advisory

Lỗ hổng khác của automate

• CVE-2026-9089CAO 8.8The ConnectWise Automate™ Agent does not fully verify the authenticity of components obtained during plugin loading and self-update operatio…
• CVE-2026-6066CAO 7.1ConnectWise has released a security update for ConnectWise Automate™ that addresses a behavior in the ConnectWise Automate Solution Center w…
• CVE-2025-11493CAO 7.5The ConnectWise Automate Agent does not fully verify the authenticity of files downloaded from the server, such as updates, dependencies, an…
• CVE-2025-11492CAO 7.5In the ConnectWise Automate Agent, communications could be configured to use HTTP instead of HTTPS. In such cases, an on-path threat actor w…
• CVE-2023-23130TRUNG BÌNH 5.9Connectwise Automate 2022.11 is vulnerable to Cleartext authentication. Authentication is being done via HTTP (cleartext) with SSL disabled.…