PT-2025-1066 · Secureage · Secureage Security Suite

Published 2025-01-06 · Updated 2025-01-09 · CVE-2024-46622

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SecureAge Security Suite versions 7.0.x through 7.0.37 SecureAge Security Suite versions 7.1.x through 7.1.10 SecureAge Security Suite versions 8.0.x through 8.0.17 SecureAge Security Suite versions 8.1.x through 8.1.17

Description A security vulnerability was found in SecureAge Security Suite software that allows arbitrary file creation, modification, and deletion, which is related to an escalation of privilege issue. The vulnerability is associated with incorrect permission storage. Exploitation of the vulnerability may allow a remote attacker to elevate their privileges.

Recommendations For SecureAge Security Suite versions 7.0.x through 7.0.37, update to version 7.0.38 or later. For SecureAge Security Suite versions 7.1.x through 7.1.10, update to version 7.1.11 or later. For SecureAge Security Suite versions 8.0.x through 8.0.17, update to version 8.0.18 or later. For SecureAge Security Suite versions 8.1.x through 8.1.17, update to version 8.1.18 or later.

Fix

Improper Preservation of Permissions

Weakness Enumeration

CWE-281

Related Identifiers

BDU:2025-00300

CVE-2024-46622

Affected Products

Secureage Security Suite

References · 9

• https://bdu.fstec.ru/vul/2025-00300 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-46622 · Security Note
• https://secureage.com · Note
• https://t.me/pentestingnews/55040 · Telegram Post
• https://secureage.com/blog/resolved-escalation-of-privilege · Note
• https://twitter.com/the_yellow_fall/status/1877167348768973253 · Twitter Post
• https://t.me/cvedetector/14400 · Telegram Post
• https://twitter.com/fridaysecurity/status/1877167127876043231 · Twitter Post
• https://twitter.com/CVEnew/status/1876332551284916423 · Twitter Post