PT-2022-18679 · Automox · Automox Agent For Macos

Published 2022-06-30 · Updated 2023-02-09 · CVE-2022-27904

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Automox Agent for macOS versions prior to 39 Automox Agent for macOS versions prior to 37

Description The issue is related to a time-of-check/time-of-use (TOCTOU) race-condition attack that can occur during the agent install process. It also involves incorrect access control on a file used within the PostInstall script, allowing an unprivileged user to obtain root access.

Recommendations For versions prior to 37, update to version 37 or later to resolve the issue. For versions prior to 39, update to version 39 or later to resolve the issue.

Fix

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

CVE-2022-27904

Affected Products

Automox Agent For Macos

References · 7

• https://automox.com · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-27904 · Security Note
• https://osv.dev/vulnerability/CVE-2022-27904 · Vendor Advisory
• https://automox.com/security/security-bulletin · Vendor Advisory
• https://t.me/cvenotify/32466 · Telegram Post
• https://t.me/cvenotify/32449 · Telegram Post
• https://t.me/cvenotify/43965 · Telegram Post