CVE-2022-0237

creationtimestamp| type| source ---|---|--- 2022-03-18 01:21:57+00:00| seen| https://t.me/cibsecurity/39183...

CVE-2022-0237

Rapid7 Insight Agent versions 3.1.2.38 and earlier are affected by a privilege-escalation flaw in ir_agent.exe caused by an unquoted runas.exe argument. This allows an attacker with local access to hijack execution flow and gain elevated, persistent access on the machine. The issue has been fixed...

CVE-2022-0237 Rapid7 Insight Agent Privilege Escalation

Rapid7 Insight Agent versions 3.1.2.38 and earlier suffer from a privilege escalation vulnerability, whereby an attacker can hijack the flow of execution due to an unquoted argument to the runas.exe command used by the iragent.exe component, resulting in elevated rights and persistent access to t...