CVE-2021-35066

An XXE vulnerability exists in ConnectWise Automate before 2021.0.6.132...

CVE-2021-35066

Summary: CVE-2021-35066 is an XXE vulnerability in ConnectWise Automate prior to 2021.0.6.132. The root cause is improper handling of XML external entities in the product’s processing, allowing an attacker to potentially access sensitive data or other impact as described by CVSS, with high-severi...

ConnectWise Automate 代码问题漏洞

Connectwise ConnectWise Automate is a cloud-based, local IT automation solution from ConnectWise Connectwise USA. The product supports content management, file sharing, IT asset tracking and management, and more. A security vulnerability exists in versions prior to ConnectWise automation...

CVE-2021-32582

An issue was discovered in ConnectWise Automate before 2021.5. A blind SQL injection vulnerability exists in core agent inventory communication that can enable an attacker to extract database information or administrative credentials from an instance via crafted monitor status responses...

CVE-2021-32582

An issue was discovered in ConnectWise Automate before 2021.5. A blind SQL injection vulnerability exists in core agent inventory communication that can enable an attacker to extract database information or administrative credentials from an instance via crafted monitor status responses...

Sql injection

An issue was discovered in ConnectWise Automate before 2021.5. A blind SQL injection vulnerability exists in core agent inventory communication that can enable an attacker to extract database information or administrative credentials from an instance via crafted monitor status responses...

CVE-2021-32582

An issue was discovered in ConnectWise Automate before 2021.5. A blind SQL injection vulnerability exists in core agent inventory communication that can enable an attacker to extract database information or administrative credentials from an instance via crafted monitor status responses...

CVE-2021-32582

An issue was discovered in ConnectWise Automate before 2021.5. A blind SQL injection vulnerability exists in core agent inventory communication that can enable an attacker to extract database information or administrative credentials from an instance via crafted monitor status responses...

CVE-2021-32582

The CVE-2021-32582 entry concerns ConnectWise Automate (before 2021.5). The vulnerability is a blind SQL injection in the core agent inventory communication, exposed via crafted monitor status responses. The issue could allow an attacker to extract database information or administrative credentia...

Connectwise ConnectWise Automate SQL注入漏洞

Connectwise ConnectWise Automate is a cloud-based, local IT automation solution from ConnectWise Connectwise USA. The product supports content management, file sharing, IT asset tracking and management, and more. A SQL injection vulnerability exists in versions of ConnectWise Automate prior to...

Veeam Service Provider Console Plugin for ConnectWise Automate opens empty configuration in ConnectWise Automate Control Center

Challenge After successfully installing the Veeam Service Provider Console Plugin for ConnectWise Automate, the Integration tab for Veeam Service Provider Console displays no data. Cause Lack of permissions for account used to log in to ConnectWise Automate and coexistence of 2 plugins: Veeam...

Iranian Hackers Utilize ScreenConnect to Spy On UAE, Kuwait Government Agencies

UAE and Kuwait government agencies are targets of a new cyberespionage campaign potentially carried out by Iranian threat actors, according to new research. Attributing the operation to be the work of Static Kitten aka MERCURY or MuddyWater, Anomali said the "objective of this activity is to...

CVE-2020-15838

The Agent Update System in ConnectWise Automate before 2020.8 allows Privilege Escalation because the LTUPDATE folder has weak permissions...

CVE-2020-15838

The Agent Update System in ConnectWise Automate before 2020.8 allows Privilege Escalation because the LTUPDATE folder has weak permissions...

Privilege escalation

The Agent Update System in ConnectWise Automate before 2020.8 allows Privilege Escalation because the LTUPDATE folder has weak permissions...

CVE-2020-15838

The Agent Update System in ConnectWise Automate before 2020.8 allows Privilege Escalation because the LTUPDATE folder has weak permissions...

CVE-2020-15838

The CVE-2020-15838 affects the ConnectWise Automate Agent Update System. Before version 2020.8, Privilege Escalation is possible due to weak permissions on the _LTUPDATE folder. The vulnerability is rooted in improper access controls, enabling an attacker with network access to escalate privilege...

“Secondary index is corrupt" error in ConnectWise Manage plugin after upgrading to Windows 10 version 2004

Challenge After upgrading the machine where Veeam Service Provider Console is installed to Windows 10 version 2004, ConnectWise Manage plugin stops working with the following error: "Secondary index is corrupt. The database must be defragmented or the affected index must be deleted. If the corrup...

CVE-2020-15027

ConnectWise Automate through 2020.x has insufficient validation on certain authentication paths, allowing authentication bypass via a series of attempts. This was patched in 2020.7 and in a hotfix for 2019.12...

CVE-2020-15027

ConnectWise Automate through 2020.x has insufficient validation on certain authentication paths, allowing authentication bypass via a series of attempts. This was patched in 2020.7 and in a hotfix for 2019.12...