Joona Hoikkala

Researcher fromVisma Red Team
#17664of 56,337
16.2Total CVSS
Vulnerabilities · 2
High
2
PT-2022-23243
8.1
2022-09-12
Freshservice · Freshservice Macos Agent · CVE-2022-36173
**Name of the Vulnerable Software and Affected Versions** FreshService macOS Agent versions < 4.4.0 FreshService Linux Agent versions < 3.4.0 **Description** The issue allows for TLS Man-in-The-Middle attacks via the FreshAgent client and scheduled update service. **Recommendations** For FreshService macOS Agent versions < 4.4.0, update to version 4.4.0 or later. For FreshService Linux Agent versions < 3.4.0, update to version 3.4.0 or later.
PT-2022-23244
8.1
2022-09-12
Freshservice · Freshservice Macos Agent · CVE-2022-36174
**Name of the Vulnerable Software and Affected Versions** FreshService Windows Agent versions prior to 2.11.0 FreshService macOS Agent versions prior to 4.2.0 FreshService Linux Agent versions prior to 3.3.0 **Description** The issue is related to broken integrity checking via the FreshAgent client and scheduled update service. **Recommendations** For FreshService Windows Agent versions prior to 2.11.0, update to version 2.11.0 or later. For FreshService macOS Agent versions prior to 4.2.0, update to version 4.2.0 or later. For FreshService Linux Agent versions prior to 3.3.0, update to version 3.3.0 or later.