Insufficient Access Control Vulnerability fixed in ADAudit Plus build 7270

Details

A vulnerability due to insufficient access control enforcement on ADAudit Plus' agent configuration data managed in registry has been fixed.

Impact

This vulnerability could allow a malicious insider to send a crafted, authenticated RPC request and modify the affected machine's agent configuration.

Steps to upgrade

Update your ADAudit Plus instance to the latest build — 7270 — using the service pack.

Acknowledgements

This issue was reported by Andreas from Shelltrail.

Please contact support@adauditplus.com for more details.