Executive Summary

This vulnerability involves installer certificate files located in the …/bootstrap/common/ssl folder on Windows systems that do not have restricted permissions. Specifically, users have read and execute access to these files.

The client.key file is particularly sensitive because it contains agent identity material. Since any locally authenticated standard user can read this file, it exposes critical identity information that could be exploited.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability could allow any locally authenticated standard user on a Windows system to access sensitive certificate files, including the client.key file.

This exposure of agent identity material could lead to exploits, such as unauthorized use of the agent's identity or impersonation, potentially compromising system security.

Useful 0 Not Useful 0