Core Privileged Access Manager (BoKS) vulnerabilities
3 known vulnerabilities in Core Privileged Access Manager (BoKS) from Fortra. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.1 High severity
Core Privileged Access Manager (BoKS): Heap-based Buffer Overflow
The revoked-key error path builds a human-readable failure reason using sprintf() into a heap buffer. The allocated buffer is too small for the final formatted message. When sprintf() writes the full message, it can write past the end of the heap allocation.
- 8.8 High severity
Core Privileged Access Manager (BoKS): Improper Neutralization of Special Elements used in an OS Command
Fortra BoKS Manager contains an OS command injection vulnerability in the client upgrade and patch tooling for legacy tar-based client installations. A malicious or compromised legacy tar-installed client selected for upgrade or patching may be able to cause c
- 9.8 Critical severity
Core Privileged Access Manager (BoKS): Improper Neutralization of Special Elements used in an OS Command
Fortra's Core Privileged Access Manager (BoKS) contains an OS command injection vulnerability in the boks_autoregisterd service. A remote attacker with network access to the service may be able to cause commands to be executed with the privileges of the servic