Third Party Index

Snapshot 19063

Document
Security advisories
URL
https://www.automox.com/platform/security/advisories
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
static
Size
169935 bytes
SHA-256 (raw)
3c731620ae5414f59a45c8517ee5910d892b5c28f57057aebd604059d1c1fcef
SHA-256 (normalized text)
d40be6918d07e3f83c5a0f8b8721e07de745a0a444260883741d6fda93d0f280

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Security Advisories
Severity
CVE
All
Severity: High
CVE Score: 7.8
CVE Vector String: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWEs: CWE-732
Description: The Automox Agent prior to version 40 for windows incorrectly sets permissions on key files.
Affected Products:
Automox Agent for Windows before version 40
Source: Reported by Synack Red Team
Severity: High
CVE Score: 7.7
CVE Vector String: AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
CWEs: CWE-367
Description: Automox Agent for OSX before version 39 was vulnerable to a time-of-check/time-of-use (TOCTOU) race-condition attack during the agent install process.
Affected Products:
Automox Agent for OSX before version 39
Source: Reported by Anonymous
Severity: Medium
CVE Score: 4.4
CVE Vector String: AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CWEs: CWE-497
Description: Automox Agent prior to version 37 on Windows and Linux and Version 36 on OSX could allow for a non privileged user to obtain sensitive information during the install process.
Affected Products:
Automox Agent prior to version 37 (Windows and Linux)
Automox Agent prior to version 36 (OSX)
Source: Reported by Mostafa Soliman
Severity: High
CVE Score: 7.8
CVE Vector String: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWEs: CWE-732
Description: The Automox Agent prior to Version 32 incorrectly sets permissions on a temporary directory while running in Windows environments.
Affected Products:
Automox Agent prior to version 32 (windows only)
Source: Reported by Greg Foss
Severity: High
CVE Score: 7.8
CVE Vector String: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWEs: CWE-732
Description: The Automox Agent Version 33 incorrectly sets permissions on a temporary directory while running in Windows environments.
Affected Products:
Automox Agent version 33 (windows only)
Source: Reported by Adam Nadrowski and Ryan Garbars - Automox Security
Severity: Low
CVE Score: 3.7
CVE Vector String: AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CWEs: CWE-497
Description: The automox agent exposes an easily guessed endpoint in the Automox AWS infrastructure
Affected Products:
Automox agents prior to version 31
Source: Reported by Rapid7 researcher Danny Jordan
Severity: Low
CVE Score: 3.3
CVE Vector String: AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CWEs: CWE-532
Description: Automox Agent improperly logs sensitive information on the local endpoint.
Affected Products:
Automox agents prior to version 31
Source: Reported by Rapid7 researcher Danny Jordan