CVE-2024-39708
CVSS 3.1 Score 7.0 of 10 (high)
Details
Summary
CVE-2024-39708 is a newly identified vulnerability affecting the Agent in Delinea Privilege Manager (formerly Thycotic Privilege Manager) before version 12.0.1096 on Windows. This issue allows a non-administrator user to potentially escalate privileges by carefully placing a crafted DLL file in a temporary directory utilized by .NET Shadow Copies. If the core agent service inadvertently loads this file, privilege escalation can occur. This vulnerability poses a serious risk and requires immediate attention from system administrators and security teams to ensure that affected systems are up-to-date with the latest patch.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions