PT-2023-20474 · Atera · Atera Agent

Andrew Oliveau

·

CVE-2023-26078

·

Published

2023-07-24

·

Updated

2023-08-01

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Atera Agent versions 1.8.4.4 and prior
Description A privilege escalation issue was discovered due to the mishandling of privileged APIs. This issue affects Atera Agent on Windows.
Recommendations For Atera Agent versions 1.8.4.4 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

CVE-2023-26078

Affected Products

Atera Agent