Read the docs

Automox

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Automox records in CISA KEV

No Automox vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

7 records

TI-2021-08515 CVE-2021-26909 · GHSA-q9rr-9m3c-3r79

Automox Agent Guessable S3 Bucket Endpoint

Priority LOW 25

Automox Agent prior to version 31 uses an insufficiently protected S3 bucket endpoint for storing sensitive files, which could be brute-forced by an attacker to subvert an organization's security program.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00726 Published 2021-04-23 Fixed in 30 CWE-284
Priority LOW 16

Automox Agent prior to version 31 logs potentially sensitive information in local log files, which could be used by a locally-authenticated attacker to subvert an organization's security program.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00245 Published 2021-04-23 Fixed in 30 CWE-532
Open these records in search →