CVE-2024-47856
In RSA Authentication Agent before 7.4.7, service paths and shortcut paths may be vulnerable to path interception if the path has one or more spaces and is not surrounded by quotation marks. An adversary can place an executable in a higher-level directory of the path, and Windows will resolve that executable instead of the intended executable.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47856?
CVE-2024-47856 is rated as a high-severity vulnerability due to its potential for exploitation through path interception.
How do I fix CVE-2024-47856?
To fix CVE-2024-47856, upgrade to RSA Authentication Agent version 7.4.7 or later.
What systems are affected by CVE-2024-47856?
CVE-2024-47856 affects RSA Authentication Agent versions prior to 7.4.7.
What is path interception in the context of CVE-2024-47856?
Path interception occurs when an attacker exploits unsecured service paths in filenames, allowing them to place a malicious executable in a higher-level directory.
What are the risks associated with CVE-2024-47856?
The risks include unauthorized execution of malicious code, leading to potential system compromise and data breaches.