An issue was discovered in DriveLock 24.1 through 24.1., 24.2 through 24.2., and 25.1 through 25.1.*. An incomplete configuration (agent authentication) in DriveLock tenant allows attackers to impersonate any DriveLock agent on the network against the DES (DriveLock Enterprise Service).
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Drivelock | Drivelock | 24.1 (including) | 24.1.4 (including) |
| Drivelock | Drivelock | 24.2 (including) | 24.2.8 (including) |
| Drivelock | Drivelock | 25.1 (including) | 25.1.6 (including) |