Lucene search

K
redosRedosROS-20240812-11
HistoryAug 12, 2024 - 12:00 a.m.

ROS-20240812-11

2024-08-1200:00:00
redos.red-soft.ru
5
glpi agent
control agent
vulnerability
code modification
dll exploitation
privilege escalation
unix

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

Low

The GLPI Agent universal control agent vulnerability involves modifying GLPI-Agent code or
allows a DLL to be used to modify the agent’s logic. Exploitation of the vulnerability could allow an attacker to
privilege escalation

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64glpi-agent< 1.8-1UNKNOWN

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

Low