GlPI-Agent MSI package installation doesn't update folder security profile when using non default installation folder
Résumé
GlPI-Agent MSI package installation doesn't update folder security profile when using non default installation folder
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The GLPI Agent is a generic management agent. Prior to version 1.7.2, a local user can modify GLPI-Agent code or used DLLs to modify agent logic and even gain higher privileges. Users should upgrade to GLPI-Agent 1.7.2 to receive a patch. As a workaround, use the default installation folder which involves installed folder is automatically secured by the system.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com