Itarian vulnerabilities
We track 3 vulnerabilities in Itarian products across 6 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 9, 2022.
Latest Itarian vulnerabilities
- 7.8 High severity
The ITarian Endpoint Manage Communication Client, prior to version 6.43.41148.21120, is…
The ITarian Endpoint Manage Communication Client, prior to version 6.43.41148.21120, is compiled using insecure OpenSSL settings. Due to this setting, a malicious actor with low privileges access to a system can escalate his privileges to SYSTEM abusing an ins
- 8.8 High severity
ITarian platform (SAAS / on-premise): Improperly Implemented Security Check for Standard
The ITarian platform (SAAS / on-premise) offers the possibility to run code on agents via a function called procedures. It is possible to require a mandatory approval process. Due to a vulnerability in the approval process, present in any version prior to 6.35
- 7.5 High severity
ITarian SaaS platform / on-premise: Incorrect Permission Assignment for Critical Resource
Within the Service Desk module of the ITarian platform (SAAS and on-premise), a remote attacker can obtain sensitive information, caused by the failure to set the HTTP Only flag. A remote attacker could exploit this vulnerability to gain access to the manageme