CVE-2021-4016

Rapid7 Insight Agent, versions prior to 3.1.3, suffer from an improper access control vulnerability whereby, the user has access to the snapshot directory. An attacker can access, read and copy any of the files in this directory e.g. assetinfo.json or fileinfo.json, leading to a loss of...

PT-2022-11195 · Rapid7 · Rapid7 Insight Agent

Name of the Vulnerable Software and Affected Versions: Rapid7 Insight Agent versions prior to 3.1.3 Description: The issue is related to improper access control, allowing users to access the snapshot directory. An attacker can access, read, and copy files in this directory, such as asset info.jso...