Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

TI-2021-08515 CVE-2021-26909 · GHSA-q9rr-9m3c-3r79

Automox Agent Guessable S3 Bucket Endpoint

Priority LOW 25

Automox Agent prior to version 31 uses an insufficiently protected S3 bucket endpoint for storing sensitive files, which could be brute-forced by an attacker to subvert an organization's security program.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00726 Published 2021-04-23 Fixed in 30 CWE-284
Priority LOW 16

Automox Agent prior to version 31 logs potentially sensitive information in local log files, which could be used by a locally-authenticated attacker to subvert an organization's security program.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00245 Published 2021-04-23 Fixed in 30 CWE-532