CVE-2017-5996

High

Published: 26/10/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The agent in Bomgar Remote Support versions 15.2.x before 15.2.3, 16.1.x before 16.1.5, and 16.2.x before 16.2.4 allows DLL hijacking due to weak %SYSTEMDRIVE%\ProgramData permissions.

Risk Assessment

Weak permissions may lead to unauthorized execution of malicious code, posing a significant security threat to the organization's systems.

Recommendation

It is recommended to update to the latest version of Bomgar Remote Support and review permissions for the %SYSTEMDRIVE%\ProgramData folder to minimize risk.

Other vulnerabilities in Bomgar Remote Support

CVE-2015-0935High
Bomgar Remote Support before 15.1.1 allows remote attackers to execute arbitrary PHP code via crafted serialized data to unspecified PHP scripts.

Original NVD description (English source)

The agent in Bomgar Remote Support 15.2.x before 15.2.3, 16.1.x before 16.1.5, and 16.2.x before 16.2.4 allows DLL hijacking because of weak %SYSTEMDRIVE%\ProgramData permissions.