insight_agent Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/insight_agent/ Sun, 26 Feb 2023 06:33:43 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png insight_agent Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/insight_agent/ 32 32 CVE-2019-5629 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-5629/ Sun, 26 Feb 2023 06:33:43 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-5629/ Rapid7 Insight Agent, version 2.6.3 and prior, suffers from a local privilege escalation due to an uncontrolled DLL search path. Specifically, when Insight Agent 2.6.3 and prior starts, the Python interpreter attempts to load python3.dll at “C:DLLspython3.dll,” which normally is writable by locally authenticated users. Because of this, a malicious local user could use Insight […]

The post CVE-2019-5629 appeared first on CVE Vulnerability.

]]> Rapid7 Insight Agent, version 2.6.3 and prior, suffers from a local privilege escalation due to an uncontrolled DLL search path. Specifically, when Insight Agent 2.6.3 and prior starts, the Python interpreter attempts to load python3.dll at “C:DLLspython3.dll,” which normally is writable by locally authenticated users. Because of this, a malicious local user could use Insight Agent’s startup conditions to elevate to SYSTEM privileges. This issue was fixed in Rapid7 Insight Agent 2.6.4.

The post CVE-2019-5629 appeared first on CVE Vulnerability.

]]> CVE-2021-4016 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-4016/ Thu, 23 Feb 2023 14:11:42 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-4016/ Rapid7 Insight Agent, versions prior to 3.1.3, suffer from an improper access control vulnerability whereby, the user has access to the snapshot directory. An attacker can access, read and copy any of the files in this directory e.g. asset_info.json or file_info.json, leading to a loss of confidentiality. This issue was fixed in Rapid7 Insight Agent […]

The post CVE-2021-4016 appeared first on CVE Vulnerability.

]]> Rapid7 Insight Agent, versions prior to 3.1.3, suffer from an improper access control vulnerability whereby, the user has access to the snapshot directory. An attacker can access, read and copy any of the files in this directory e.g. asset_info.json or file_info.json, leading to a loss of confidentiality. This issue was fixed in Rapid7 Insight Agent 3.1.3.

The post CVE-2021-4016 appeared first on CVE Vulnerability.

]]> CVE-2021-4007 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-4007/ Thu, 23 Feb 2023 14:11:40 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-4007/ Rapid7 Insight Agent, versions 3.0.1 to 3.1.2.34, suffer from a local privilege escalation due to an uncontrolled DLL search path. Specifically, when Insight Agent versions 3.0.1 to 3.1.2.34 start, the Python interpreter attempts to load python3.dll at “C:DLLspython3.dll,” which normally is writable by locally authenticated users. Because of this, a malicious local user could use […]

The post CVE-2021-4007 appeared first on CVE Vulnerability.

]]> Rapid7 Insight Agent, versions 3.0.1 to 3.1.2.34, suffer from a local privilege escalation due to an uncontrolled DLL search path. Specifically, when Insight Agent versions 3.0.1 to 3.1.2.34 start, the Python interpreter attempts to load python3.dll at “C:DLLspython3.dll,” which normally is writable by locally authenticated users. Because of this, a malicious local user could use Insight Agent’s startup conditions to elevate to SYSTEM privileges. This issue was fixed in Rapid7 Insight Agent 3.1.2.35. This vulnerability is a regression of CVE-2019-5629.

The post CVE-2021-4007 appeared first on CVE Vulnerability.

]]> CVE-2022-0237 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-0237/ Thu, 23 Feb 2023 05:01:50 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-0237/ Rapid7 Insight Agent versions 3.1.2.38 and earlier suffer from a privilege escalation vulnerability, whereby an attacker can hijack the flow of execution due to an unquoted argument to the runas.exe command used by the ir_agent.exe component, resulting in elevated rights and persistent access to the machine. This issue was fixed in Rapid7 Insight Agent version […]

The post CVE-2022-0237 appeared first on CVE Vulnerability.

]]> Rapid7 Insight Agent versions 3.1.2.38 and earlier suffer from a privilege escalation vulnerability, whereby an attacker can hijack the flow of execution due to an unquoted argument to the runas.exe command used by the ir_agent.exe component, resulting in elevated rights and persistent access to the machine. This issue was fixed in Rapid7 Insight Agent version 3.1.3.80.

The post CVE-2022-0237 appeared first on CVE Vulnerability.

]]>