GitHub Advisoryadvisory · Go

GHSA-m5gv-m5f9-wgv4 Grafana Agent (Flow mode) on Windows has Unquoted Search Path or Element vulnerability

MEDIUM Published 2024-09-25 Modified 2024-10-09 Official page ↗
Aliases
CVE-2024-8996
Ecosystem
Go
Packages
github.com/grafana/agent
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-428
Reviewed
2024-10-01

Affected packages

• Go github.com/grafana/agent: < 0.43.3 → fixed in 0.43.3

Description

Unquoted Search Path or Element vulnerability in Grafana Agent (Flow mode) on Windows allows Privilege Escalation from Local User to SYSTEM. This issue affects Agent Flow before 0.43.3.

Related

Alias · CVE (1)

  • CVE-2024-8996 Unquoted Search Path or Element vulnerability in Grafana Agent (Flow mode) on Windows allows Privilege Escalation from Local User to SYSTEM… vulnerability

Weakness · CWE (1)

  • CWE-428 Unquoted Search Path or Element weakness

References