Threats tagged 'ghsa-qjf6-95gx-vqgh'

A vulnerability in SecureConnector for Windows occurs when the “Additional Appliance Connections” setting is enabled and the agent’s configuration file has more than three trusted-server entries, some lacking TLS certificate fingerprints. This flaw allows the agent to accept connections from malicious servers controlled by an attacker on the network, enabling execution of arbitrary commands as SYSTEM with full administrative privileges.