Skip to content
CVE PROGRAM SOURCE RECORD4.4 Medium

CVE-2026-12164

Privilege Escalation in Fortra File Integrity Monitoring (FIM)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Fortra

Description

Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, particularly when the import also creates or changes roles or role-permission relationships.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortra File Integrity Monitoring (FIM)

Default version status: unaffected

  • 0 to < 9.4.0affected

References