Description
Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, particularly when the import also creates or changes roles or role-permission relationships.
Published: 2026-06-23
Score: 4.4 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

Fortra File Integrity Monitoring (FIM) prior to version 9.4.0 can incorrectly assign or elevate effective permissions to users created or modified by the tetool import command while FIM is running. The flaw is an insecure permission management error that may give attackers higher privileges than intended. The upgrade fix resolves the issue.

Affected Systems

Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions earlier than 9.4.0 are impacted. No further version granularity is noted in the advisory.

Risk and Exploitability

The CVSS score of 4.4 indicates moderate severity. EPSS data is not available and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is internal, requiring an attacker to run the tetool import while FIM is operational. An attacker with the ability to execute tetool could leverage the flaw to grant themselves unauthorized permissions, but the exploit requires pre‑existing privileges to perform the import.

Generated by OpenCVE AI on June 24, 2026 at 09:18 UTC.

Remediation

Vendor Solution

Upgrade to version 9.4.0 or later.

OpenCVE Recommended Actions

  • Upgrade Fortra File Integrity Monitoring to version 9.4.0 or later.
  • Configure the system to schedule tetool imports only during maintenance windows, ensuring FIM is inactive during the operation.
  • Restrict execution of tetool to approved administrators and prevent automatic role or permission changes during import.

Generated by OpenCVE AI on June 24, 2026 at 09:18 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 23 Jun 2026 22:45:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 4.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N'}

 cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N'}

Tue, 23 Jun 2026 22:30:00 +0000

Type Values Removed Values Added
Description Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, particularly when the import also creates or changes roles or role-permission relationships.
Title Privilege Escalation in Fortra File Integrity Monitoring (FIM)
Weaknesses CWE-266
References
Metrics cvssV3_1

{'score': 4.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: Fortra

Published:

Updated: 2026-06-24T13:15:39.352Z

Reserved: 2026-06-12T19:31:35.041Z

Link: CVE-2026-12164

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-24T09:30:06Z

Weaknesses
  • CWE-266

    Incorrect Privilege Assignment