EUVD-2024-16190

Malicious code in bioql PyPI...

CVE-2024-0394

Rapid7 Minerva Armor versions below 4.5.5 suffer from a privilege escalation vulnerability whereby an authenticated attacker can elevate privileges and execute arbitrary code with SYSTEM privilege. The vulnerability is caused by the product's implementation of OpenSSL'sOPENSSLDIR parameter where...

CVE-2024-0394 Rapid7 Minerva Armor Privilege Escalation

Rapid7 Minerva Armor versions below 4.5.5 suffer from a privilege escalation vulnerability whereby an authenticated attacker can elevate privileges and execute arbitrary code with SYSTEM privilege. The vulnerability is caused by the product's implementation of OpenSSL'sOPENSSLDIR parameter where...

CVE-2024-0394 Rapid7 Minerva Armor Privilege Escalation

Rapid7 Minerva Armor versions below 4.5.5 suffer from a privilege escalation vulnerability whereby an authenticated attacker can elevate privileges and execute arbitrary code with SYSTEM privilege. The vulnerability is caused by the product's implementation of OpenSSL'sOPENSSLDIR parameter where...

CVE-2024-0394

CVE-2024-0394 affects Rapid7 Minerva Armor versions prior to 4.5.5. The issue is a privilege escalation where an authenticated attacker can elevate privileges to SYSTEM and execute arbitrary code. The root cause lies in OpenSSL OPENSSLDIR being set to a path accessible to low-privileged users, wh...

CVE-2024-0394: Rapid7 Minerva Armor Privilege Escalation (FIXED)

Rapid7 is disclosing CVE-2024-0394, a privilege escalation vulnerability in Rapid7 Minerva’s Armor product family. Minerva uses the open-source OpenSSL library for cryptographic functions and to support secure communications. The root cause of this vulnerability is Minerva’s implementation of...

Rapid7 Minerva Armor 安全漏洞

Rapid7 Minerva Armor is a core endpoint security component from US-based Rapid7, Inc. It is designed to prevent circumvention of malware, ransomware and advanced cyber attacks. A security vulnerability exists in Rapid7 Minerva Armor versions prior to 4.5.5. An attacker could exploit the...

PT-2024-15524 · Openssl +1 · Openssl +1

Name of the Vulnerable Software and Affected Versions: Rapid7 Minerva Armor versions prior to 4.5.5 Description: The issue is a privilege escalation vulnerability that allows an authenticated attacker to elevate privileges and execute arbitrary code with SYSTEM privilege. This is caused by the...