AutomationManager Race Condition Vulnerability Could Lead to Arbitrary File Deletions

CVE-2023-37244

Summary

The AutomationManager.AgentService.exe application is vulnerable to a time-of-check-to-time-of-use (TOCTOU) race condition. This flaw allows standard users to create pseudo-symlinks in the Temp directory, located at C:\ProgramData\N-Able Technologies\AutomationManager\Temp. An attacker can exploit this vulnerability to manipulate the process, resulting in arbitrary file deletions. It is essential for organizations utilizing the affected software to upgrade to version 2.91.0.0 to mitigate this risk.

References