PT-2024-22356 · Unknown+1 · Glpi Agent+1
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
GLPI Agent versions prior to 1.7.2
Description
A local user can modify the GLPI-Agent code or used DLLs to modify agent logic and potentially gain higher privileges.
Recommendations
For versions prior to 1.7.2, upgrade to GLPI-Agent 1.7.2 to receive a patch.
As a temporary workaround, consider using the default installation folder, which allows the installed folder to be automatically secured by the system.
Exploit
Fix
Improper Privilege Management
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Glpi Agent
Red Os