Rapid7 Insight Agent, versions prior to 3.1.3, suffer from an improper access control vulnerability whereby, the user has access to the snapshot directory. An attacker can access, read and copy any of the files in this directory e.g. asset_info.json or file_info.json, leading to a loss of confidentiality. This issue was fixed in Rapid7 Insight Agent 3.1.3.
References
| Link | Resource |
|---|---|
| https://docs.rapid7.com/release-notes/insightagent/20220119/ | Release Notes Third Party Advisory |
| https://docs.rapid7.com/release-notes/insightagent/20220119/ | Release Notes Third Party Advisory |
Configurations
History
21 Nov 2024, 06:36
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://docs.rapid7.com/release-notes/insightagent/20220119/ - Release Notes, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : 2.1
v3 : 4.0 |
05 Aug 2022, 11:09
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-Other |
27 Jan 2022, 18:56
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 2.1
v3 : 3.3 |
| References | (CONFIRM) https://docs.rapid7.com/release-notes/insightagent/20220119/ - Release Notes, Third Party Advisory | |
| CWE | CWE-269 | |
| CPE | cpe:2.3:a:rapid7:insight_agent:*:*:*:*:*:*:*:* |
21 Jan 2022, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Rapid7 Insight Agent, versions prior to 3.1.3, suffer from an improper access control vulnerability whereby, the user has access to the snapshot directory. An attacker can access, read and copy any of the files in this directory e.g. asset_info.json or file_info.json, leading to a loss of confidentiality. This issue was fixed in Rapid7 Insight Agent 3.1.3. |
21 Jan 2022, 18:32
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-01-21 18:15
Updated : 2024-11-21 06:36
NVD link : CVE-2021-4016
Mitre link : CVE-2021-4016
CVE.ORG link : CVE-2021-4016
JSON object : View
Products Affected
rapid7
- insight_agent
CWE