Skip to content
OpenAdvisories
High · 7.8 CVE-2024-1150 EUVD-2024-16919GHSA-fcj4-pm86-7gjw

Improper validation of update packages

Published Feb 8, 2024 · Updated Aug 1, 2024 · Assigned by Snow

Description

Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on Unix allows File Manipulation through Snow Update Packages.This issue affects Inventory Agent: through 7.3.1.

Affected products

VendorProductAffectedFixed
Snow Software Inventory Agent ≤ 7.3.1 —

References