CVE-2024-28241 GlPI-Agent MSI package installation doesn't update folder security profile when using non default installation folder

What is CVE-2024-28241?

CVE-2024-28241 is a high-severity vulnerability in glpi-project glpi-agent, published on 25 Apr 2024.

Official description

The GLPI Agent is a generic management agent. Prior to version 1.7.2, a local user can modify GLPI-Agent code or used DLLs to modify agent logic and even gain higher privileges. Users should upgrade to GLPI-Agent 1.7.2 to receive a patch. As a workaround, use the default installation folder which involves installed folder is automatically secured by the system.

Weakness: CWE-269

Which versions are affected by CVE-2024-28241?

It affects 1 product.

Products include Glpi-Project Glpi Agent.

How do I fix CVE-2024-28241?

No fix has been published for CVE-2024-28241 yet. Limit exposure of the affected software until one is available.

Is CVE-2024-28241 being exploited?

There is no known exploitation of CVE-2024-28241 in the wild and no public exploit code.

Other vulnerabilities in glpi-project glpi-agent

• CVE-2023-34254 Remote inventory task command injection when using ssh command mode High 7.7
• CVE-2024-28240 GLPI-Agent's MSI package installation permits local users to change Agent configuration High 7.3

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-3268-p58w-86hw, UBUNTU-CVE-2024-28241.