ConnectWise Automate Improper Authentication

04/08/2021
Products: Automate
Severity: Critical
Priority: 1 - High

Vulnerability

CWE-287 -ImproperAuthentication

Severity

Critical - Vulnerabilities that could allow the ability to remotely execute code or directly access confidential data

Priority

1 - Vulnerabilities that are either being targeted or have higher risk of being targeted by exploits in the wild.  Recommend patching as soon as possible.

Remediation

CLOUD:

No actionneeded.  Cloud instanceshavebeenremediated.

ON-PREMISE:

Apply the 2021.4 release.

Additional Info

https://home.connectwise.com/securityBulletin/606f62ef39917e00016f21cc

Software Updates

LatestStable:https://university.connectwise.com/University/automateresources/productsandupdates.aspx