FreshService macOS Agent < 4.4.0 and FreshServce Linux Agent < 3.4.0 are vulnerable to TLS Man-in-The-Middle via the FreshAgent client and scheduled update service.
The product does not validate, or incorrectly validates, a certificate.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Freshservice_agent | Freshworks | * | 2.12.0 (excluding) |
| Freshservice_agent | Freshworks | * | 3.4.0 (excluding) |
| Freshservice_agent | Freshworks | * | 4.4.0 (excluding) |
| Freshservice_probe | Freshworks | * | 4.11.0 (excluding) |