PT-2021-23318 · Flexera · Flexnet Inventory Beacon+1

Published 2021-09-21 · Updated 2021-10-04 · CVE-2021-41525

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions FlexNet inventory agent and inventory beacon versions 2020 R2.5 and prior

Description An issue exists related to the modification of otherwise restricted files through a locally authenticated attacker.

Recommendations For versions 2020 R2.5 and prior, update to a version later than 2020 R2.5 to resolve the issue.

Fix

Related Identifiers

CVE-2021-41525

Affected Products

Flexnet Inventory Agent

Flexnet Inventory Beacon

References · 4

• https://community.flexera.com/t5/FlexNet-Manager-Knowledge-Base/FlexNet-Inventory-Agent-and-Inventory-Beacon-Vulnerability/ta-p/204723 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-41525 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-41525 · Security Note
• https://t.me/cibsecurity/29188 · Telegram Post