Fortra's Robot Schedule Enterprise Agent for Windows prior to version 3.04 is susceptible to privilege escalation. A low-privileged user can overwrite the service executable. When the service is restarted, the replaced binary runs with local system privileges, allowing a low-privileged user to gain elevated privileges.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: Fortra
Published: 2024-03-28T14:31:07.986Z
Updated: 2024-08-01T17:41:16.446Z
Reserved: 2024-01-05T23:59:37.995Z
Link: CVE-2024-0259
Vulnrichment
Updated: 2024-08-01T17:41:16.446Z
NVD
Status : Awaiting Analysis
Published: 2024-03-28T15:15:46.180
Modified: 2024-03-28T16:07:30.893
Link: CVE-2024-0259
Redhat
No data.