Insufficient Access Control Vulnerability fixed in ADAudit Plus build 7270

Details

A vulnerability in ADAudit Plus due to insufficient access control enforcement on the session recording storage folder on agent-installed machines has been fixed.

Impact

This vulnerability could allow an insider with an authenticated session to view the recorded session data of other users on the affected machine.

Steps to upgrade

Update your ADAudit Plus instance to the latest build — 7270 — using the service pack.

Acknowledgements

This issue was reported by Andreas from Shelltrail.

Please contact support@adauditplus.com for more details.