Description
The Agent Update System in ConnectWise Automate before 2020.8 allows Privilege Escalation because the _LTUPDATE folder has weak permissions.
Unscored
CVE-2020-15838
EUVD-2020-7820GHSA-cp23-9g3v-fp46
The Agent Update System in ConnectWise Automate before 2020.8 allows Privilege Escalation because the _LTUPDATE folder has weak permissions.
Published Oct 9, 2020 · Updated Aug 4, 2024 · Assigned by mitre