CVE-2023-25590: Improper Privilege Management

A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher role. A successful exploit allows malicious users to execute arbitrary code with root level privileges on the Linux instance...

SUSE CVE-2019-0804

An information disclosure vulnerability exists in the way Azure WaLinuxAgent creates swap files on resource disks, aka 'Azure Linux Agent Information Disclosure Vulnerability'...

CVE-2022-43534

A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with root level privileges on the Linux instance in Aruba ClearPass Policy Manager versions...

Security feature bypass

A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with root level privileges on the Linux instance in Aruba ClearPass Policy Manager versions...

CVE-2022-43534

A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with root level privileges on the Linux instance in Aruba ClearPass Policy Manager versions...

CVE-2022-43534

The CVE-2022-43534 entry describes a privilege elevation vulnerability in Aruba ClearPass Policy Manager via the ClearPass OnGuard Linux agent. Affected products are Aruba ClearPass Policy Manager 6.10.x (up to 6.10.7) and 6.9.x (up to 6.9.12). The root cause is an issue in the OnGuard Linux agen...

CVE-2022-43534: Improper Privilege Management

A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with root level privileges on the Linux instance in Aruba ClearPass Policy Manager versions...

PT-2023-14245 · Aruba · Clearpass Onguard Linux Agent +1

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions 6.10.x: 6.10.7 and below Aruba ClearPass Policy Manager versions 6.9.x: 6.9.12 and below Description: A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance...

PT-2022-6227 · Microsoft · Azure Service Fabric Container

Name of the Vulnerable Software and Affected Versions: Azure Service Fabric Container affected versions not specified Description: The issue is related to the Azure Service Fabric Container and involves an elevation of privilege vulnerability. This vulnerability is associated with the WAagent...

CVE-2022-36174

FreshService Windows Agent 2.11.0 and FreshService macOS Agent 4.2.0 and FreshService Linux Agent 3.3.0. are vulnerable to Broken integrity checking via the FreshAgent client and scheduled update service...

CVE-2022-36173

FreshService macOS Agent 4.4.0 and FreshServce Linux Agent 3.4.0 are vulnerable to TLS Man-in-The-Middle via the FreshAgent client and scheduled update service...

CVE-2022-36174

FreshService Windows Agent 2.11.0 and FreshService macOS Agent 4.2.0 and FreshService Linux Agent 3.3.0. are vulnerable to Broken integrity checking via the FreshAgent client and scheduled update service...

CVE-2022-36174

CVE-2022-36174 affects FreshService agents: Windows < 2.11.0, macOS < 4.2.0, Linux

CVE-2022-36173: Improper Certificate Validation

FreshService macOS Agent 4.4.0 and FreshServce Linux Agent 3.4.0 are vulnerable to TLS Man-in-The-Middle via the FreshAgent client and scheduled update service...

CVE-2022-36174: Improper Validation of Integrity Check Value

FreshService Windows Agent 2.11.0 and FreshService macOS Agent 4.2.0 and FreshService Linux Agent 3.3.0. are vulnerable to Broken integrity checking via the FreshAgent client and scheduled update service...

PT-2022-23243 · Freshservice · Freshservice Linux Agent +1

Name of the Vulnerable Software and Affected Versions: FreshService macOS Agent versions 4.4.0 FreshService Linux Agent versions 3.4.0 Description: The issue allows for TLS Man-in-The-Middle attacks via the FreshAgent client and scheduled update service. Recommendations: For FreshService macOS...

PT-2022-23244 · Freshservice · Freshservice Linux Agent +2

Name of the Vulnerable Software and Affected Versions: FreshService Windows Agent versions prior to 2.11.0 FreshService macOS Agent versions prior to 4.2.0 FreshService Linux Agent versions prior to 3.3.0 Description: The issue is related to broken integrity checking via the FreshAgent client and...

Freshworks FreshService 安全漏洞

Freshworks FreshService is a cloud-based IT help desk and service management solution from Freshworks, Inc. It enables organizations to streamline their IT operations. A security vulnerability exists in Freshworks FreshService Windows Agent versions prior to 2.11.0, FreshService macOS Agent...

Multiple vulnerabilities in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux

Overview Deep Security and Cloud One - Workload Security Agent for Linux provided by Trend Micro Incorporated contain multiple vulnerabilities listed below. Directory Traversal CWE-22 - CVE-2022-23119 Code Injection CWE-94 - CVE-2022-23120 As of 2022 January 24, a Proof-of-Concept PoC code...

CVE-2022-23119

A directory traversal vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to read arbitrary files from the file system. Please note: an attacker must first obtain compromised access to the target Deep Security...