Description (CNA)
The Agent Update System in ConnectWise Automate before 2020.8 allows Privilege Escalation because the _LTUPDATE folder has weak permissions.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.connectwise.com/company/trust/security-bulletins
- https://dbeta.com/2020/10/05/PrivilegeEscalationInAutomateAgent
ADP enrichment
No English description supplied.