PT-2024-25212 · Digital Guardian · Digital Guardian Windows Agents

Published 2024-11-15 · Updated 2024-11-18 · CVE-2024-3334

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Digital Guardian Windows Agents versions prior to 8.2.0

Description A security bypass issue exists in the Removable Media Encryption (RME) component, allowing users to circumvent encryption controls by modifying metadata on USB devices, thereby compromising data confidentiality.

Recommendations For versions prior to 8.2.0, update to version 8.2.0 or later to resolve the issue.

Fix

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-922

Related Identifiers

CVE-2024-3334

Affected Products

Digital Guardian Windows Agents

References · 6

• https://fortra.com/security/advisories/product-security/fi-2024-013 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-3334 · Security Note
• https://support.fortra.com/endpoint-dlp/kb-articles/dg-support-notice-security-bypass-vulnerability-with-rme-MTQwYTM5NTctZDk4Ny1lZjExLWFjMjEtNjA0NWJkMDFhMzQ3 · Vendor Advisory
• https://twitter.com/CVEnew/status/1857557123829477750 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1857584145276235809 · Twitter Post
• https://t.me/cvedetector/11176 · Telegram Post