Skip to content
OpenAdvisories
High · 7.8 CVE-2024-1149 EUVD-2024-16918GHSA-7w7c-rqj8-5pmg

Improper validation of update packages

Published Feb 8, 2024 · Updated May 15, 2025 · Assigned by Snow

Description

Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on MacOS, Snow Software Inventory Agent on Windows, Snow Software Inventory Agent on Linux allows File Manipulation through Snow Update Packages.This issue affects Inventory Agent: through 6.12.0; Inventory Agent: through 6.14.5; Inventory Agent: through 6.7.2.

Affected products

VendorProductAffectedFixed
Snow Software Inventory Agent ≤ 6.12.0, ≤ 6.14.5, ≤ 6.7.2 —

References