EUVD-2024-16190

Malicious code in bioql PyPI...

CVE-2024-0394

Rapid7 Minerva Armor versions below 4.5.5 suffer from a privilege escalation vulnerability whereby an authenticated attacker can elevate privileges and execute arbitrary code with SYSTEM privilege. The vulnerability is caused by the product's implementation of OpenSSL'sOPENSSLDIR parameter where...

CVE-2024-0394 Rapid7 Minerva Armor Privilege Escalation

Rapid7 Minerva Armor versions below 4.5.5 suffer from a privilege escalation vulnerability whereby an authenticated attacker can elevate privileges and execute arbitrary code with SYSTEM privilege. The vulnerability is caused by the product's implementation of OpenSSL'sOPENSSLDIR parameter where...

CVE-2024-0394 Rapid7 Minerva Armor Privilege Escalation

Rapid7 Minerva Armor versions below 4.5.5 suffer from a privilege escalation vulnerability whereby an authenticated attacker can elevate privileges and execute arbitrary code with SYSTEM privilege. The vulnerability is caused by the product's implementation of OpenSSL'sOPENSSLDIR parameter where...

CVE-2024-0394

CVE-2024-0394 affects Rapid7 Minerva Armor versions prior to 4.5.5. The issue is a privilege escalation where an authenticated attacker can elevate privileges to SYSTEM and execute arbitrary code. The root cause lies in OpenSSL OPENSSLDIR being set to a path accessible to low-privileged users, wh...

CVE-2024-0394: Rapid7 Minerva Armor Privilege Escalation (FIXED)

Rapid7 is disclosing CVE-2024-0394, a privilege escalation vulnerability in Rapid7 Minerva’s Armor product family. Minerva uses the open-source OpenSSL library for cryptographic functions and to support secure communications. The root cause of this vulnerability is Minerva’s implementation of...

PT-2024-15524 · Openssl +1 · Openssl +1

Name of the Vulnerable Software and Affected Versions: Rapid7 Minerva Armor versions prior to 4.5.5 Description: The issue is a privilege escalation vulnerability that allows an authenticated attacker to elevate privileges and execute arbitrary code with SYSTEM privilege. This is caused by the...

Rapid7 Minerva Armor 安全漏洞

Rapid7 Minerva Armor is a core endpoint security component from US-based Rapid7, Inc. It is designed to prevent circumvention of malware, ransomware and advanced cyber attacks. A security vulnerability exists in Rapid7 Minerva Armor versions prior to 4.5.5. An attacker could exploit the...