Grafana Alloy on Windows has Unquoted Search Path or Element vulnerability
Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to SYSTEM. This issue affects Alloy: before 1.3.4, from 1.4.0-rc.0 and prior to 1.4.1.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-8975US | high7.8 | — | ||
Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to SYSTEM
This issue affects Alloy: before 1.3.3, from 1.4.0-r… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/grafana/alloyPACKAGE
- https://github.com/grafana/alloy/commit/88e779887690954c009503598a3f4bf563cb6596WEB
- https://github.com/grafana/alloy/commit/f14249012fd970d3fd73604e6fff9b6c7990a9bbWEB
- https://github.com/grafana/alloy/releases/tag/v1.3.4WEB
- https://github.com/grafana/alloy/releases/tag/v1.4.0WEB
- https://github.com/grafana/alloy/releases/tag/v1.4.1WEB
- https://grafana.com/blog/2024/09/25/grafana-alloy-and-grafana-agent-flow-security-release-high-severity-fix-for-cve-2024-8975-and-cve-2024-8996WEB
- https://grafana.com/security/security-advisories/cve-2024-8975WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan