Agiloft Local Privilege Escalation via Default Credentials

A vulnerability allowing local privilege escalation through default and backdoor credentials has been identified in Agiloft Release 28. Improper configuration during on-premise installations may result in user accounts being created with default credentials, which, if unchanged, could be exploited to escalate privileges. The password hash for at least one of these accounts is known, allowing for offline cracking of the credentials. This issue has been resolved in Agiloft Release 30.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a user to gain elevated rights and access within the application or system.

Remediation

Users are advised to upgrade to Agiloft Release 30 or later. For guidance on secure installation and password management, refer to the Agiloft documentation.