CVE-2020-15838: High severity connectwise vulnerability
The Agent Update System in ConnectWise Automate before 2020.8 allows Privilege Escalation because the LTUPDATE folder has weak permissions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-15838?
CVE-2020-15838 has a medium severity rating due to its potential for privilege escalation.
How do I fix CVE-2020-15838?
To fix CVE-2020-15838, you should update ConnectWise Automate to version 2020.8 or later and properly configure the permissions of the _LTUPDATE folder.
What impact does CVE-2020-15838 have on systems?
CVE-2020-15838 allows unauthorized users to escalate their privileges and gain access to sensitive functionalities within ConnectWise Automate.
Who is affected by CVE-2020-15838?
CVE-2020-15838 affects all versions of ConnectWise Automate prior to 2020.8.
Is there a workaround for CVE-2020-15838?
While the best course of action is to upgrade, a temporary workaround includes adjusting the permissions on the _LTUPDATE folder to prevent unauthorized access.