Automox Agent Sensitive Log Information Disclosure

3.3 CVSS

Vulnerability Description

Automox Agent prior to version 31 logs potentially sensitive information in local log files, which could be used by a locally-authenticated attacker to subvert an organization's security program. The issue has since been fixed in version 31 of the Automox Agent.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-26908

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

This issue was discovered by Danny Jordan of Rapid7, and disclosed in accordance with Rapid7's vulnerability disclosure policy at https://www.rapid7.com/security/disclosure#zeroday