Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2023-7169: Authentication Bypass by Spoofing vulnerability in Snow Software Snow Inventory Agent on Windows allows Signature Spoof.This issue affects Snow Inventory Agent: through 6.14.5. Customers advised to...
CVE-2023-7169 · published 2 years ago
Summary
Authentication Bypass by Spoofing vulnerability in Snow Software Snow Inventory Agent on Windows allows Signature Spoof.This issue affects Snow Inventory Agent: through 6.14.5. Customers advised to upgrade to version 7.0
What to do
- Update snowsoftware snow_inventory_agent to version 7.0 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| snowsoftware | snow_inventory_agent |
< 7.0 cpe:2.3:a:snowsoftware:snow_inventory_agent:*:*:*:*:*:*:*:* |
Original advisory text
Authentication Bypass by Spoofing vulnerability in Snow Software Snow Inventory Agent on Windows allows Signature Spoof.This issue affects Snow Inventory Agent: through 6.14.5. Customers advised to...
Authentication Bypass by Spoofing vulnerability in Snow Software Snow Inventory Agent on Windows allows Signature Spoof.This issue affects Snow Inventory Agent: through 6.14.5. Customers advised to upgrade to version 7.0
References
- https://community.snowsoftware.com/s/feed/0D5Td000004YtMcKAK Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-290Authentication Bypass by Spoofing
Timeline
Published8 Feb 2024
Updated26 Oct 2026
First seen29 Sep 2026
Sources
CVE-2023-7169 · NVD
Track software like this
Free during beta