Rapid7 Insight Agent, versions prior to 3.1.3, suffer from an improper access control vulnerability whereby, the user has access to the snapshot directory. An attacker can access, read and copy any of the files in this directory e.g. asset_info.json or file_info.json, leading to a loss of confidentiality. This issue was fixed in Rapid7 Insight Agent 3.1.3.
References
| Link | Resource |
|---|---|
| https://docs.rapid7.com/release-notes/insightagent/20220119/ | Release Notes Third Party Advisory |
Configurations
History
05 Aug 2022, 11:09
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-Other |
27 Jan 2022, 18:56
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-269 | |
| First Time |
Rapid7
Rapid7 insight Agent |
|
| CVSS |
v2 : v3 : |
v2 : 2.1
v3 : 3.3 |
| References | (CONFIRM) https://docs.rapid7.com/release-notes/insightagent/20220119/ - Release Notes, Third Party Advisory | |
| CPE | cpe:2.3:a:rapid7:insight_agent:*:*:*:*:*:*:*:* |
21 Jan 2022, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Rapid7 Insight Agent, versions prior to 3.1.3, suffer from an improper access control vulnerability whereby, the user has access to the snapshot directory. An attacker can access, read and copy any of the files in this directory e.g. asset_info.json or file_info.json, leading to a loss of confidentiality. This issue was fixed in Rapid7 Insight Agent 3.1.3. |
21 Jan 2022, 18:32
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-01-21 18:15
Updated : 2023-12-10 14:09
NVD link : CVE-2021-4016
Mitre link : CVE-2021-4016
CVE.ORG link : CVE-2021-4016
JSON object : View
Products Affected
rapid7
- insight_agent
CWE