Path Interception Vulnerability in RSA Authentication Agent for Windows

CVE-2024-47856

What is CVE-2024-47856?

A path interception vulnerability exists in RSA Authentication Agent versions prior to 7.4.7, where service paths and shortcut paths are susceptible to exploitation. This occurs when the file paths contain spaces and are not enclosed in quotation marks, allowing an attacker to position an executable file in a higher directory level. Consequently, when the RSA Authentication Agent attempts to resolve the executable, it may inadvertently execute the attacker's file instead of the intended one, leading to unauthorized actions.

References