{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2024-7358","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","state":"PUBLISHED","assignerShortName":"VulDB","dateReserved":"2024-08-01T07:22:20.570Z","datePublished":"2024-08-01T13:31:05.739Z","dateUpdated":"2026-11-02T08:32:28.048Z"},"containers":{"cna":{"providerMetadata":{"orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB","dateUpdated":"2026-11-02T08:32:28.048Z"},"title":"Point B Ltd Getscreen Agent MSI Installer getscreen.msi temp file","problemTypes":[{"descriptions":[{"type":"CWE","cweId":"CWE-378","lang":"en","description":"Creation of Temporary File With Insecure Permissions"}]},{"descriptions":[{"type":"CWE","cweId":"CWE-377","lang":"en","description":"Insecure Temporary File"}]}],"affected":[{"vendor":"Point B Ltd","product":"Getscreen Agent","versions":[{"version":"2.19.0","status":"affected"},{"version":"2.19.1","status":"affected"},{"version":"2.19.2","status":"affected"},{"version":"2.19.3","status":"affected"},{"version":"2.19.4","status":"affected"},{"version":"2.19.5","status":"affected"},{"version":"2.19.6","status":"affected"},{"version":"3.9.0","status":"affected"},{"version":"3.9.1","status":"affected"},{"version":"3.9.2","status":"affected"},{"version":"3.9.3","status":"affected"},{"version":"3.9.4","status":"affected"},{"version":"3.9.5","status":"unaffected"}],"cpes":["cpe:2.3:a:point_b_ltd:getscreen_agent:*:*:*:*:*:*:*:*"],"modules":["MSI Installer"]}],"descriptions":[{"lang":"en","value":"A vulnerability was detected in Point B Ltd Getscreen Agent up to 2.19.6/3.9.4 on Windows. This affects an unknown function of the file getscreen.msi of the component MSI Installer. The manipulation results in creation of temporary file with insecure permissions. The attack is only possible with local access. The exploit is now public and may be used. Upgrading to version 3.9.5 mitigates this issue. Upgrading the affected component is advised."}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.5,"vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P","baseSeverity":"HIGH"}},{"cvssV3_1":{"version":"3.1","baseScore":7.8,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","baseSeverity":"HIGH"}},{"cvssV3_0":{"version":"3.0","baseScore":7.8,"vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","baseSeverity":"HIGH"}},{"cvssV2_0":{"version":"2.0","baseScore":6.8,"vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:OF/RC:C"}}],"timeline":[{"time":"2024-08-01T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2024-08-01T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-10-20T00:00:00.000Z","lang":"en","value":"Countermeasure disclosed"},{"time":"2026-11-02T09:37:00.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"saumyajeetdas (VulDB User)","type":"reporter"}],"references":[{"url":"https://vuldb.com/vuln/273337","name":"VDB-273337 | Point B Ltd Getscreen Agent MSI Installer getscreen.msi temp file","tags":["vdb-entry"]},{"url":"https://vuldb.com/vuln/273337/cti","name":"VDB-273337 | CTI Indicators (IOB, IOC, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/cve/CVE-2024-7358","name":"CVE-2024-7358 | CVE Analysis and Report","tags":["third-party-advisory"]},{"url":"https://vuldb.com/submit/374979","name":"Submit #374979 | POINT B LTD Getscreen Agent  2.19.6 Creation of Temporary File in Directory with Insecure Permission","tags":["third-party-advisory"]},{"url":"https://github.com/SaumyajeetDas/Vulnerability/tree/main/GetScreen","tags":["exploit"]},{"url":"https://docs.getscreen.me/change-log/agent/windows/","tags":["patch"]}],"x_generator":["VulDB PVTS v202611"]},"adp":[{"affected":[{"vendor":"getscreen","product":"getscreen","cpes":["cpe:2.3:a:getscreen:getscreen:2.19.6:*:*:*:*:*:*:*"],"defaultStatus":"unknown","versions":[{"version":"2.19.6","status":"affected"}]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-08-01T14:35:43.920114Z","id":"CVE-2024-7358","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2024-08-01T14:45:12.374Z"}}]}}