Broadcom Automic Automation Agent Unix Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in Broadcom Automic Automation Agent Unix, specifically in versions prior to 24.4.4 HF1. This vulnerability allows low-privileged users with execution rights on the agent executable to escalate their privileges. The issue is present on several platforms, including Linux (Power 64 BE), zLinux (zSeries), AIX, Solaris (x64, Sparc 64)

Impact

Exploitation of this vulnerability allows low-privileged users to escalate their privileges, potentially leading to unauthorized access or actions within the system.

Remediation

Users can upgrade to Automic Automation versions 24.4.4 HF1 or 26.0.0 to address this vulnerability. After upgrading, it's important to restart the agent and verify the installation by checking the agent version and hotfix level via the user interface, agent log, or a database query.