Vicotr Gevers

**Name of the Vulnerable Software and Affected Versions** ITarian platform (SAAS and on-premise) (affected versions not specified) **Description** A remote attacker can obtain sensitive information due to the failure to set the HTTP Only flag within the Service Desk module. This issue can be exploited in combination with a successful Cross-Site Scripting attack to gain access to the management interface. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ITarian platform versions prior to 6.35.37347.20040 **Description** The ITarian platform has a vulnerability in its approval process for procedures, which allows a malicious actor with a valid session token to create a procedure, bypass approval, and execute it. This results in the ability to perform arbitrary code execution and full system take-over on all agents. **Recommendations** For versions prior to 6.35.37347.20040, update to version 6.35.37347.20040 or later to resolve the issue. As a temporary workaround, consider restricting access to the procedure function to minimize the risk of exploitation. Additionally, restrict the use of valid session tokens to only necessary users to reduce the attack surface.

**Name of the Vulnerable Software and Affected Versions** ITarian Endpoint Manage Communication Client versions prior to 6.43.41148.21120 **Description** The issue is related to the ITarian Endpoint Manage Communication Client being compiled with insecure OpenSSL settings. This allows a malicious actor with low privileges access to a system to escalate their privileges to SYSTEM by abusing an insecure openssl.conf lookup. **Recommendations** For versions prior to 6.43.41148.21120, update to version 6.43.41148.21120 or later to resolve the issue. As a temporary workaround, consider restricting access to the openssl.conf file to minimize the risk of exploitation.