The CoSoSys Endpoint Protector through 5.9.3 and Unify agent through 7.0.6 is susceptible to an arbitrary code execution vulnerability due to the way an archive obtained from the Endpoint Protector or Unify server is extracted on the endpoint. An attacker who is able to modify the archive on the server could obtain remote code execution as an administrator on an endpoint.
References
Configurations
No configuration.
History
21 Nov 2024, 09:21
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://helpcenter.netwrix.com/bundle/z-kb-articles-salesforce/page/kA0Qk0000001E5lKAE.html - |
09 Jul 2024, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) The CoSoSys Endpoint Protector through 5.9.3 and Unify agent through 7.0.6 is susceptible to an arbitrary code execution vulnerability due to the way an archive obtained from the Endpoint Protector or Unify server is extracted on the endpoint. An attacker who is able to modify the archive on the server could obtain remote code execution as an administrator on an endpoint. |
03 Jul 2024, 02:02
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-06-27 21:15
Updated : 2024-11-21 09:21
NVD link : CVE-2024-36075
Mitre link : CVE-2024-36075
CVE.ORG link : CVE-2024-36075
JSON object : View
Products Affected
No product.
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')