PT-2021-17519
CVE-2021-27579
·
تاريخ النشر
2021-02-23
·
تاريخ التحديث
2022-07-12
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Snow Inventory Agent versions 6.7.0 and earlier
Description
A privilege-escalation issue exists in Snow Inventory Agent on Windows when CPUID is enabled, allowing it to report on processor types and versions deployed across an IT environment. To mitigate this, CPUID should be disabled via configuration settings.
Recommendations
For Snow Inventory Agent versions 6.7.0 and earlier, disable CPUID via configuration settings to prevent potential privilege escalation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾