Grafana Agent (Flow mode) on Windows has Unquoted Search Path or Element vulnerability
Unquoted Search Path or Element vulnerability in Grafana Agent (Flow mode) on Windows allows Privilege Escalation from Local User to SYSTEM. This issue affects Agent Flow before 0.43.3.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-8996US | high7.8 | — | ||
Unquoted Search Path or Element vulnerability in Grafana Agent (Flow mode) on Windows allows Privilege Escalation from Local User to SYSTEM
This issue affects Agent Flow: before 0.… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/grafana/agentPACKAGE
- https://github.com/grafana/agent/commit/91bab2c05906938d3f8e1e3c61a863f037985299WEB
- https://github.com/grafana/agent/releases/tag/v0.43.2WEB
- https://github.com/grafana/agent/releases/tag/v0.43.3WEB
- https://grafana.com/blog/2024/09/25/grafana-alloy-and-grafana-agent-flow-security-release-high-severity-fix-for-cve-2024-8975-and-cve-2024-8996WEB
- https://grafana.com/security/security-advisories/cve-2024-8996WEB
- https://nvd.nist.gov/vuln/detail/CVE-2024-8996ADVISORY
- https://pkg.go.dev/vuln/GO-2024-3170WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan