CVE-2021-26909 Automox Agent Guessable S3 Bucket Endpoint
An attacker can brute-force a guessable S3 bucket endpoint to access sensitive files, potentially compromising an organization's security program.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-26909?
CVE-2021-26909 is a low-severity vulnerability in Automox Agent, published on 23 Apr 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Automox Agent prior to version 31 uses an insufficiently protected S3 bucket endpoint for storing sensitive files, which could be brute-forced by an attacker to subvert an organization's security program. The issue has since been fixed in version 31 of the Automox Agent.
Which versions are affected by CVE-2021-26909?
It affects 1 product.
Products include Automox Automox.
How do I fix CVE-2021-26909?
No fix has been published for CVE-2021-26909 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-26909 being exploited?
There is no known exploitation of CVE-2021-26909 in the wild and no public exploit code.
Other vulnerabilities in Automox Agent
Sources
Also known as GHSA-q9rr-9m3c-3r79.