Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Heimdal Thor agent versions 3.4.2 and before 3.7.0 on Windows, allows attackers to bypass USB access restrictions, execute arbitrary code, and obtain sensitive information via Next-Gen Antivirus component. NOTE: Heimdal argues that the limitation described here is a Microsoft Windows issue, not a Heimdal specific vulnerability. The USB control solution by Heimdal is meant to manage Microsoft Windows native USB restrictions. They maintain that their solution functions as a management layer over Windows settings and is not to blame for limitations in Windows' detection capabilities.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Heimdal 安全漏洞
Vulnerability Description
Heimdal是Heimdal开源的一个 Kerberos 的实现及安全程序。 Heimdal Thor agent存在安全漏洞，该漏洞源于允许攻击者绕过USB访问限制，执行任意代码，并通过Next-Gen Antivirus组件获取敏感信息。受影响的产品和版本：Heimdal Thor agent on Windows 3.4.2及之前版本，on macOS 3.7.0及之前版本。
CVSS Information
N/A
Vulnerability Type
N/A