CVE-2021-43326

Automox Agent before 32 on Windows incorrectly sets permissions on a temporary directory...

Design/Logic Flaw

Automox Agent 33 on Windows incorrectly sets permissions on a temporary directory. NOTE: this issue exists because of a CVE-2021-43326 regression...

Directory traversal

Automox Agent before 32 on Windows incorrectly sets permissions on a temporary directory...

CVE-2021-43326

Automox Agent before 32 on Windows incorrectly sets permissions on a temporary directory...

CVE-2021-43326

CVE-2021-43326 affects Automox Agent on Windows prior to version 32, where the agent incorrectly sets permissions on a temporary directory. This behavioral flaw enables local privilege escalation (as noted by multiple sources, including Exploit-DB references describing a Windows-based privilege e...

CVE-2021-43325

Automox Agent 33 on Windows incorrectly sets permissions on a temporary directory. NOTE: this issue exists because of a CVE-2021-43326 regression...

CVE-2021-43325

Automox Agent for Windows (version 33) is affected by CVE-2021-43325, which states the agent incorrectly sets permissions on a temporary directory. This issue exists due to a regression linked to CVE-2021-43326. Connected sources confirm the vulnerability is local in scope with potential to escal...

Automox Alive Automox Agent 安全漏洞

Automox Alive Automox Agent is an application from the Automox Alive community. An agent software. Automox Alive Automox Agent 33 A security vulnerability exists on Windows that originates from incorrectly setting the permissions of a temporary directory...

Automox Alive Automox Agent 安全漏洞

automox Alive Automox Agent is an agent software from the Automox Alive community. The automox Alive Automox Agent before 32 version denial of service vulnerability, which stems from the agent incorrectly setting permissions to temporary directories. An attacker could exploit this vulnerability t...

Exploit for Incorrect Default Permissions in Automox

CVE-2021-43326 Exploit Automox Windows Agent Privilege Escala...

Automox Alive Automox Agent Access Control Error Vulnerability

Automox Alive Automox Agent is an application from the Automox Alive community. An agent software. An Access Control Error vulnerability exists in versions prior to Automox Agent 31 that stems from the use of inadequately protected S3 bucket endpoints to store sensitive files, which can be...

Automox Alive Automox Agent Log Information Disclosure Vulnerability

Automox Alive Automox Agent is an application from the Automox Alive community. An agent software. A log information disclosure vulnerability exists in versions prior to Automox Agent 31, which stems from logging potentially sensitive information in local log files. No details of the vulnerabilit...

CVE-2021-26909

Automox Agent prior to version 31 uses an insufficiently protected S3 bucket endpoint for storing sensitive files, which could be brute-forced by an attacker to subvert an organization's security program. The issue has since been fixed in version 31 of the Automox Agent...

CVE-2021-26908

Automox Agent prior to version 31 logs potentially sensitive information in local log files, which could be used by a locally-authenticated attacker to subvert an organization's security program. The issue has since been fixed in version 31 of the Automox Agent...

CVE-2021-26908

Automox Agent prior to version 31 logs potentially sensitive information in local log files, which could be used by a locally-authenticated attacker to subvert an organization's security program. The issue has since been fixed in version 31 of the Automox Agent...

CVE-2021-26909

Automox Agent prior to version 31 uses an insufficiently protected S3 bucket endpoint for storing sensitive files, which could be brute-forced by an attacker to subvert an organization's security program. The issue has since been fixed in version 31 of the Automox Agent...

Code injection

Automox Agent prior to version 31 uses an insufficiently protected S3 bucket endpoint for storing sensitive files, which could be brute-forced by an attacker to subvert an organization's security program. The issue has since been fixed in version 31 of the Automox Agent...

Information disclosure

Automox Agent prior to version 31 logs potentially sensitive information in local log files, which could be used by a locally-authenticated attacker to subvert an organization's security program. The issue has since been fixed in version 31 of the Automox Agent...

CVE-2021-26908

CVE-2021-26908 and CVE-2021-26909 apply to the Automox Agent prior to version 31. The issues are: (1) information disclosure via logging potentially sensitive data in local log files, and (2) storing sensitive files via an insufficiently protected S3 bucket endpoint that could be brute-forced. Ro...

CVE-2021-26909

CVE-2021-26909 affects the Automox Agent prior to version 31. The root cause is an insufficiently protected S3 bucket endpoint used to store sensitive files, which could be brute-forced by an attacker to subvert an organization’s security program. Mitigation: upgrade to Automox Agent 31 or later,...