WatchGuard Agent vulnerabilities
4 known vulnerabilities in WatchGuard Agent from WatchGuard. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.3 High severity
WatchGuard Agent: Incorrect Default Permissions
An incorrect permission assignment vulnerability in the WatchGuard Agent's log directory allows a local, authenticated non-administrative user to create, modify, append to, or delete the agent's log files and write other files into the directory. This allows a
- 9.3 Critical severity
WatchGuard Agent: Missing Authentication for Critical Functionality
Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges.
- 9.4 Critical severity
WatchGuard Agent: Improper Control of Generation of Code
A path traversal vulnerability in WatchGuard Agent allows a remote, unauthenticated attacker on an adjacent network to execute arbitrary code on an affected system.
- 7.8 High severity
WatchGuard Agent: Incorrect Permission Assignment for Critical Resource
Incorrect permission assignment for a resource in the patch management component of the WatchGuard Agent on Windows allows an authenticated local user to elevate their privileges to NT AUTHORITY\\SYSTEM.