StrongDM Windows Service Root Certificate Management Vulnerability
Vulnerability
A vulnerability exists in the StrongDM Windows service due to improper handling of system certificate management communication. This flaw allows attackers to install untrusted root certificates or remove trusted ones. The issue affects all Windows client application CLI versions prior to 47.50.0.
Impact
Exploitation of this vulnerability could lead to the unauthorized installation of root certificates, potentially allowing for man-in-the-middle attacks, or the removal of trusted certificates, disrupting secure communications.
Remediation
Users should update to StrongDM Windows client application CLI version 47.50.0 or later.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.