CVE-2024-36075
June 27, 2024, 9:15 p.m.
Tags
Product(s) Impacted
CoSoSys Unify
- through 7.0.6
CoSoSys Endpoint Protector
- through 5.9.3
Description
Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the application configuration component of the Endpoint Protector and Unify agent which allows a remote, unauthenticated attacker to manipulate the configuration of either their own or another client endpoint resulting in the bypass of certain configuration options. Manipulation of the application configuration can result in local policy bypass and in some scenarios remote code execution.
Weaknesses
Date
Published: June 27, 2024, 9:15 p.m.
Last Modified: June 27, 2024, 9:15 p.m.
Status : Received
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
cve@mitre.org