Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-21216
HistoryMar 18, 2022 - 12:00 a.m.

Rapid7 Insight Agent has an unspecified vulnerability

2022-03-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
10

0.0004 Low

EPSS

Percentile

5.1%

Rapid7 Insight Agent is a lightweight software from Rapid7, Inc. The software is capable of collecting data from IT assets.A security vulnerability exists in Rapid7 Insight Agent version 3.1.2.38 and prior versions, which stems from the fact that Rapid7 Insight Agent version 3.1.2.38 and prior versions do not properly double quote when using runas.exe. An attacker could exploit this vulnerability to elevate privileges and gain persistent access to the computer.

CPENameOperatorVersion
Rapid7 Insight Agent <=3.eq1.2.38

0.0004 Low

EPSS

Percentile

5.1%

Related for CNVD-2022-21216