CVE-2024-39708

Summary

CVE-2024-39708 is a newly identified vulnerability affecting the Agent in Delinea Privilege Manager (formerly Thycotic Privilege Manager) before version 12.0.1096 on Windows. This issue allows a non-administrator user to potentially escalate privileges by carefully placing a crafted DLL file in a temporary directory utilized by .NET Shadow Copies. If the core agent service inadvertently loads this file, privilege escalation can occur. This vulnerability poses a serious risk and requires immediate attention from system administrators and security teams to ensure that affected systems are up-to-date with the latest patch.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.