Beveiligingsadvies

CVE-2024-39708

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-06-27 00:00:00
Laatst bijgewerkt 2024-10-31 13:26:17
Toegewezen door mitre
CVSS-score 7.0
Status PUBLISHED

Beschrijving

An issue was discovered in the Agent in Delinea Privilege Manager (formerly Thycotic Privilege Manager) before 12.0.1096 on Windows. Sometimes, a non-administrator user can copy a crafted DLL file to a temporary directory (used by .NET Shadow Copies) such that privilege escalation can occur if the core agent service loads that file.