Skip to content
CVE PROGRAM SOURCE RECORD3.7 Low

CVE-2021-26909

Automox Agent Guessable S3 Bucket Endpoint

Description

Automox Agent prior to version 31 uses an insufficiently protected S3 bucket endpoint for storing sensitive files, which could be brute-forced by an attacker to subvert an organization's security program. The issue has since been fixed in version 31 of the Automox Agent.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Automox Automox Agent

  • 30 to < 30affected

References