OpenText Operations Agent Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in OpenText Operations Agent versions through 12.29 on Windows. Under certain conditions, the agent may execute files from specific writable directories. This vulnerability allows a low-privileged user to execute code with SYSTEM-level rights on the local machine, requiring local system access.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution with elevated privileges on the local system.

Remediation

A hotfix is available for download from the OpenText Marketplace. Instructions for installation can be found in the readme.txt file included with the hotfix. The hotfix is available for Operations Agent versions 12.24 through 12.29.