CVE-2024-39708

High

Description

An issue was discovered in the Agent in Delinea Privilege Manager (formerly Thycotic Privilege Manager) before 12.0.1096 on Windows. Sometimes, a non-administrator user can copy a crafted DLL file to a temporary directory (used by .NET Shadow Copies) such that privilege escalation can occur if the core agent service loads that file.

SeverityHigh

CVSS7.0

Exploit probability—

Product—

PublishedJun 28, 2024

First seenJun 28, 2024

Weakness typeCWE-427CWE-427

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

Sources have not yet published the affected products and versions for this vulnerability.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.