CVE-2024-1149

—

CVSS 3.1

5.5 medium

EPSS

<1%p2

Published

Feb 8, 2024 (Feb 8, 2024)

Modified

Jun 17, 2026

Description

Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on MacOS, Snow Software Inventory Agent on Windows, Snow Software Inventory Agent on Linux allows File Manipulation through Snow Update Packages.This issue affects Inventory Agent: through 6.12.0; Inventory Agent: through 6.14.5; Inventory Agent: through 6.7.2.

Vendors: snowsoftware
Products: snow inventory agent
Weakness: CWE-347
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news0 stories

No ingested article mentions this CVE yet.