Security Advisory

CVE-2024-0259

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-03-28 14:31:07
Last updated 2024-08-01 17:41:16
Assigner Fortra
CVSS score 7.3
State PUBLISHED

Description

Fortra's Robot Schedule Enterprise Agent for Windows prior to version 3.04 is susceptible to privilege escalation. A low-privileged user can overwrite the service executable. When the service is restarted, the replaced binary runs with local system privileges, allowing a low-privileged user to gain elevated privileges.