Lucene search

K
nvd[email protected]NVD:CVE-2024-1149
HistoryFeb 08, 2024 - 1:15 p.m.

CVE-2024-1149

2024-02-0813:15:09
CWE-347
web.nvd.nist.gov
snow software
cryptographic signature
file manipulation
macos
windows
linux
vulnerability
cve-2024-1149
inventory agent

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

0.0004 Low

EPSS

Percentile

9.1%

Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on MacOS, Snow Software Inventory Agent on Windows, Snow Software Inventory Agent on Linux allows File Manipulation through Snow Update Packages.This issue affects Inventory Agent: through 6.12.0; Inventory Agent: through 6.14.5; Inventory Agent: through 6.7.2.

Affected configurations

NVD
Node
snowsoftwaresnow_inventory_agentRange<6.7.2
OR
snowsoftwaresnow_inventory_agentRange6.14.06.14.5
OR
snowsoftwaresnow_inventory_agentMatch6.12.0
AND
applemacosMatch-
OR
linuxlinux_kernelMatch-
OR
microsoftwindowsMatch-

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

0.0004 Low

EPSS

Percentile

9.1%

Related for NVD:CVE-2024-1149