VULNERABILITY INTELLIGENCE

CVE-2024-1149

CVSS score7.8 HIGH
EPSS probability0.12%
CISA KEVNot currently listed
Published2024-02-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on MacOS, Snow Software Inventory Agent on Windows, Snow Software Inventory Agent on Linux allows File Manipulation through Snow Update Packages.This issue affects Inventory Agent: through 6.12.0; Inventory Agent: through 6.14.5; Inventory Agent: through 6.7.2.

Weakness classification

  • security@snowsoftware.com: CWE-347
  • nvd@nist.gov: CWE-347

Primary references