CVE-2022-24308 Information disclosure in n/a

What is CVE-2022-24308?

CVE-2022-24308 is a medium-severity vulnerability in n/a, published on 13 Apr 2022. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Automox Agent prior to version 37 on Windows and Linux and Version 36 on OSX could allow for a non privileged user to obtain sensitive information during the install process.

Which versions are affected by CVE-2022-24308?

It affects 1 product.

Products include Automox Automox.

How do I fix CVE-2022-24308?

No fix has been published for CVE-2022-24308 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-24308 being exploited?

There is no known exploitation of CVE-2022-24308 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2022-36122 Misconfiguration in n/a High 7.8
• CVE-2021-43325 Misconfiguration in n/a High 7.8
• CVE-2021-43326 Misconfiguration in n/a High 7.8
• CVE-2022-27904 Race condition in n/a High 7.0
• CVE-2021-26909 Automox Agent Guessable S3 Bucket Endpoint Low 3.7

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-c767-wghx-xccm.