Privilege Escalation in Robot Schedule Enterprise Agent for Windows prior to version 3.04

Fortra Security and Trust Center

FI-2024-005 - Privilege Escalation in Robot Schedule Enterprise Agent for Windows prior to version 3.04

Severity
Critical
Published Date
28-Mar-2024
Updated Date
28-Mar-2024
Vulnerabilities
CVE-2024-0259
 
Notes
Description

Fortra's Robot Schedule Enterprise Agent for Windows prior to version 3.04 is susceptible to privilege escalation. A low-privileged user can overwrite the service executable. When the service is restarted, the replaced binary runs with local system privileges, allowing a low-privileged user to gain elevated privileges.

 

Vulnerabilities

 
Privilege Escalation in Robot Schedule Enterprise Agent for Windows prior to version 3.04
Severity
Critical
CVE
CVE-2024-0259
CWE
CWE-276:Incorrect Default Permissions
Discovery Date
07-Dec-2023
CSSv3.1
7.3 (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Affected Products
Fortra's Robot Schedule Enterprise Agent for Windows prior to 3.04
Vulnerability Notes
Remediation: Vendor Fix

Robot Schedule Enterprise Agent for Windows 3.04 or higher

 
References
 

Acknowledgements

Fortra would like to thank the following individuals:

  • Travis Dotseth , Prime Therapeutics