Skip to content
OpenAdvisories
High · 7.0 CVE-2024-39708 EUVD-2024-38196GHSA-6744-v55g-mhwj

An issue was discovered in the Agent in Delinea Privilege Manager (formerly Thycotic Privilege Manager) before 12.0.1096 on Windows. Someti…

Published Jun 27, 2024 · Updated Oct 31, 2024 · Assigned by mitre

Description

An issue was discovered in the Agent in Delinea Privilege Manager (formerly Thycotic Privilege Manager) before 12.0.1096 on Windows. Sometimes, a non-administrator user can copy a crafted DLL file to a temporary directory (used by .NET Shadow Copies) such that privilege escalation can occur if the core agent service loads that file.

References