CVE-2021-26909CWE-284
Automox Agent Guessable S3 Bucket Endpoint
Low · published April 23, 2021
What it is
Automox Agent prior to version 31 uses an insufficiently protected S3 bucket endpoint for storing sensitive files, which could be brute-forced by an attacker to subvert an organization's security program. The issue has since been fixed in version 31 of the Automox Agent.
The record
Technical detail
- CVSS v3.1
- 3.7 · LOW
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00726 · 53.6th percentile
- Weakness
- CWE-284 · Improper Access Control
- Published
- 2021-04-23T15:35Z
EPSS history
Timeline