Products
JumpCloud Agent
- before 1.178.0
Source
cve@mitre.org
Tags
CVE-2023-26603 details
Published : April 26, 2024, 8:15 p.m.
Last Modified : April 26, 2024, 8:15 p.m.
Last Modified : April 26, 2024, 8:15 p.m.
Description
JumpCloud Agent before 1.178.0 Creates a Temporary File in a Directory with Insecure Permissions. This allows privilege escalation to SYSTEM via a repair action in the installer.
CVSS Score
1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 |
---|
Weakness
Weakness | Name | Description |
---|
References
URL | Source |
---|---|
https://community.jumpcloud.com/t5/jumpcloud-product-news/bd-p/releases | cve@mitre.org |
https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2024/MNDT-2024-0003.md | cve@mitre.org |
This website uses the NVD API, but is not approved or certified by it.