There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The Kolide Agent (aka: Launcher) is the lightweight agent designed to work with Kolide's service. An
    implementation bug in the Kolide Agent (known as `launcher`) allows for local privilege escalation to the
    SYSTEM user on Windows 10 and 11. The bug was introduced in version 1.5.3 when launcher started storing
    upgraded binaries in the ProgramData directory. This move to the new directory meant the launcher root
    directory inherited default permissions that are not as strict as the previous location. These incorrect
    default permissions in conjunction with an omitted SystemDrive environmental variable (when launcher
    starts osqueryd), allows a malicious actor with access to the local Windows device to successfully place
    an arbitrary DLL into the osqueryd process's search path. Under some circumstances, this DLL will be
    executed when osqueryd performs a WMI query. This combination of events could then allow the attacker to
    escalate their privileges to SYSTEM. Impacted versions include versions >= 1.5.3 and the fix has been
    released in 1.12.3. (CVE-2024-54131)

远程主机上安装的 Kolide Agent for Windows 版本为 1.5.3 或低于 1.12.3。因此，该应用程序受到特权提升漏洞的影响。

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

遠端主機上安裝的 Kolide Agent for Windows 版本大於或等於 1.5.3 版本以及 1.12.3 之前的版本。因此會受到特權提升弱點影響。

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

リモートホストにインストールされている Kolide Agent for Windows は、1.5.3 以降、 1.12.3 以前のバージョンです。したがって、権限の昇格の脆弱性の影響を受けます。

Nessus はこの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

The version of Kolide Agent for Windows installed on the remote host is greater or equal to 1.5.3 and prior to 1.12.3. It is, therefore, affected by a privilege escalation vulnerability.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
411252	SCA: security update for github.com/kolide/launcher (GHSA-66q9-2rvx-qfj5)	Tenable Cloud Security	SCA Checks	2025/1/23	2026/7/2	high
411252	SCA: security update for github.com/kolide/launcher (GHSA-66q9-2rvx-qfj5)	Tenable Self-Hosted Container Security	SCA Checks	2025/1/23	2026/7/2	high
212756	Kolide Agent for Windows >= 1.5.3 < 1.12.3 权限升级 (CVE-2024-54131)	Nessus	Windows	2024/12/13	2024/12/16	high
212756	Kolide Agent for Windows >= 1.5.3 < 1.12.3 權限提升 (CVE-2024-54131)	Nessus	Windows	2024/12/13	2024/12/16	high
212756	Kolide Agent for Windows >= 1.5.3 < 1.12.3 権限昇格 (CVE-2024-54131)	Nessus	Windows	2024/12/13	2024/12/16	high
212756	Kolide Agent for Windows >= 1.5.3 < 1.12.3 Privilege Escalation (CVE-2024-54131)	Nessus	Windows	2024/12/13	2024/12/16	high

检测

插件搜索

high

high

high

high

high

high