CVE-2021-4007

Rapid7 Insight Agent, versions 3.0.1 to 3.1.2.34, suffer from a local privilege escalation due to an uncontrolled DLL search path. Specifically, when Insight Agent versions 3.0.1 to 3.1.2.34 start, the Python interpreter attempts to load python3.dll at "C:\DLLs\python3.dll," which normally is...

CVE-2021-4007

Rapid7 Insight Agent, versions 3.0.1 to 3.1.2.34, suffer from a local privilege escalation due to an uncontrolled DLL search path. Specifically, when Insight Agent versions 3.0.1 to 3.1.2.34 start, the Python interpreter attempts to load python3.dll at "C:\DLLs\python3.dll," which normally is...

CVE-2021-4007

CVE-2021-4007 – Rapid7 Insight Agent privilege escalation : Affects Rapid7 Insight Agent runtimes 3.0.1–3.1.2.34. The root cause is an uncontrolled DLL search path where startup loads python3.dll from C:\DLLs, a writable location, allowing a local attacker to elevate to SYSTEM. Impact is local pr...