NetSight
high8.8

CVE-2020-15838

The Agent Update System in ConnectWise Automate before 2020.8 allows Privilege Escalation because the _LTUPDATE folder has weak permissions.

Impact

The Agent Update System in ConnectWise Automate before 2020.8 allows Privilege Escalation because the _LTUPDATE folder has weak permissions.

Affected products

VendorProductAffected versions
ConnectwiseAutomate
before 2020.8

Weakness classification

References