Threats tagged 'ghsa-p7ww-wjh2-g3gw'

Control-M/Agent is vulnerable to unauthenticated remote code execution, arbitrary file read and write, and other unauthorized actions when mutual SSL/TLS authentication is not enabled, which is the default configuration. The vendor states that this vulnerability occurs only if documented security best practices, such as enabling SSL/TLS between Control-M Server and Agent, are not followed.