Privilege Escalation in Robot Schedule Enterprise Agent for Windows prior to version 3.04

Fortra's Robot Schedule Enterprise Agent for Windows prior to version 3.04 is susceptible to privilege escalation. A low-privileged user can overwrite the service executable. When the service is restarted, the replaced binary runs with local system privileges, allowing a low-privileged user to gain elevated privileges.

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

缺省权限不正确

Fortra Robot Schedule Enterprise Agent for Windows 安全漏洞

Fortra Robot Schedule Enterprise Agent是Fortra公司的一款企业级任务调度软件的组件。 Fortra Robot Schedule Enterprise Agent for Windows 3.04 之前版本存在安全漏洞，该漏洞源于允许低权限用户覆盖服务可执行文件，当服务重新启动时，替换的二进制文件将以本地系统权限运行，从而允许低权限用户提升权限。

N/A

N/A