TI-2022-10780 CVE-2022-27905 · GHSA-355f-vf9w-7hm2
In ControlUp Real-Time Agent before 8.6, an unquoted path can result in privilege…
Priority LOW 34
In ControlUp Real-Time Agent before 8.6, an unquoted path can result in privilege escalation.
3 records
In ControlUp Real-Time Agent before 8.6, an unquoted path can result in privilege escalation.
An unauthenticated Named Pipe channel in Controlup Real-Time Agent (cuAgent.exe) before 8.5 potentially allows an attacker to run OS commands via the ProcessActionRequest WCF method.
A hardcoded key in ControlUp Real-Time Agent (cuAgent.exe) before 8.2.5 may allow a potential attacker to run OS commands via a WCF channel.