Snowsoftware

Snow Inventory Agent

5 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2024-1149

  • EPSS 0.03%
  • Published 08.02.2024 13:15:09
  • Last modified 21.11.2024 08:49:54

Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on MacOS, Snow Software Inventory Agent on Windows, Snow Software Inventory Agent on Linux allows File Manipulation through Snow Update Packages.This issu...

5.5

CVE-2024-1150

  • EPSS 0.03%
  • Published 08.02.2024 13:15:09
  • Last modified 21.11.2024 08:49:54

Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on Unix allows File Manipulation through Snow Update Packages.This issue affects Inventory Agent: through 7.3.1.

5.5

CVE-2023-7169

  • EPSS 0.01%
  • Published 08.02.2024 13:15:08
  • Last modified 21.11.2024 08:45:25

Authentication Bypass by Spoofing vulnerability in Snow Software Snow Inventory Agent on Windows allows Signature Spoof.This issue affects Snow Inventory Agent: through 6.14.5. Customers advised to upgrade to version 7.0

6.1

CVE-2021-41562

  • EPSS 0.05%
  • Published 03.11.2021 21:15:08
  • Last modified 21.11.2024 06:26:25

A vulnerability in Snow Snow Agent for Windows allows a non-admin user to cause arbitrary deletion of files. This issue affects: Snow Snow Agent for Windows version 5.0.0 to 6.7.1 on Windows.

7.8

CVE-2021-27579

  • EPSS 0.06%
  • Published 23.02.2021 18:15:14
  • Last modified 21.11.2024 05:58:13

Snow Inventory Agent through 6.7.0 on Windows uses CPUID to report on processor types and versions that may be deployed and in use across an IT environment. A privilege-escalation vulnerability exists if CPUID is enabled, and thus it should be disabl...