PatchTheCVEsnow inventory agent vulnerabilities and fixes
Recent CVEs affecting snow inventory agent, with upgrade or downgrade steps. 3 tracked.
Also searched as: snowinventoryagent.
snow inventory agent has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2024-02-08. Highest priority: CVE-2024-1150 (score 28/100).
- CVE-2024-1150 HIGH 7.8 UPGRADE Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on Unix allows
- CVE-2024-1149 HIGH 7.8 UPGRADE Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on MacOS, Snow
- CVE-2023-7169 MEDIUM 6.0 UPGRADE Authentication Bypass by Spoofing vulnerability in Snow Software Snow Inventory Agent on Windows allows Signat
FAQ
How do I fix snow inventory agent vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is snow inventory agent being exploited right now?
None of the tracked snow inventory agent CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which snow inventory agent CVE should I patch first?
CVE-2024-1150 currently ranks highest (28/100): Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on Unix allows.