CVE-2024-1150

Summary

CVE-2024-1150 is a newly disclosed vulnerability that impacts the Snow Software Inventory Agent on Unix. This issue stems from an improper verification of cryptographic signatures, enabling an attacker to manipulate files through Snow Update Packages. This vulnerability poses a significant risk, as it allows unauthorized modifications to the software inventory. The affected version range is Inventory Agent through 7.3.1. To mitigate this risk, it is recommended that users upgrade to the latest version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.