PT-2022-16597 · Automox · Automox Agent

Published 2022-04-13 · Updated 2022-04-20 · CVE-2022-24308

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Automox Agent versions prior to 37 on Windows and Linux Automox Agent version 36 on OSX

Description The issue allows a non-privileged user to obtain sensitive information during the install process.

Recommendations For Automox Agent versions prior to 37 on Windows and Linux, update to version 37 or later. For Automox Agent version 36 on OSX, update to a version later than 36.

Fix

Related Identifiers

CVE-2022-24308

Affected Products

Automox Agent

References · 6

• https://osv.dev/vulnerability/CVE-2022-24308 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-24308 · Security Note
• https://automox.com · Vendor Advisory
• https://automox.com/security/security-bulletin · Vendor Advisory
• https://t.me/cibsecurity/40716 · Telegram Post
• https://t.me/cvenotify/28830 · Telegram Post