Vulnerabilidades

Improper neutralization of special elements used in a command ('command injection') in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network.

Untrusted search path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally.

Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

Improper control of generation of code ('code injection') in Azure Monitor Agent allows an unauthorized attacker to execute code over an adjacent network.

An issue was discovered in Opsview Monitor Agent 6.8. An unauthenticated remote attacker can call check_nrpe against affected targets, specifying known NRPE plugins, which in default installations are configured to accept command control characters and pass them to command-line interpreters for NRPE plugin execution.…

Azure Monitor Agent Elevation of Privilege Vulnerability

Azure Monitor Agent Elevation of Privilege Vulnerability

Azure Monitor Agent Elevation of Privilege Vulnerability

Azure Monitor Agent Elevation of Privilege Vulnerability