CVE Vulnerabilities

CVE-2022-36174

Improper Validation of Integrity Check Value

Published: Sep 12, 2022 | Modified: Sep 15, 2022
CVSS 3.x
8.1
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

FreshService Windows Agent < 2.11.0 and FreshService macOS Agent < 4.2.0 and FreshService Linux Agent < 3.3.0. are vulnerable to Broken integrity checking via the FreshAgent client and scheduled update service.

Weakness

The product does not validate or incorrectly validates the integrity check values or “checksums” of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission.

Affected Software

Name Vendor Start Version End Version
Freshservice_agent Freshworks * 2.11.0 (excluding)
Freshservice_agent Freshworks * 3.3.0 (excluding)
Freshservice_agent Freshworks * 4.2.0 (excluding)

Potential Mitigations

References