OneIdentity Privilege Manager Agent Security Patch Advisory (v12.0.2150)

From this webpage screenshot, the following key vulnerability information can be obtained: 1. Windows Agent Software: - Warning: Do not upgrade any Windows 11, version 23H2 or older, machines to Windows 11 24H2 if they also run Privilege Manager agent version 12.0.1096 or older. Similarly, do not install agent version 12.0.1096 or older on any computer that already has Windows 11, version 24H2, or Windows Server 2025 pre-installed. - Important: Windows agent versions 12.0.2142 and earlier contain a security issue. A patch to fix this issue is included in Windows agent version 12.0.2150, which is available on the Software Downloads page. 2. macOS Agent: - Warning: Do not install agent version 12.0.1096 or older on any computer that already has Windows 11, version 24H2, or Windows Server 2025 pre-installed. 3. Installation Notes: - Important: Privilege Manager versions 12.0.2 and later no longer support Windows Server 2012 R2 and older operating systems. To ensure the latest security improvements are implemented, existing installations must be upgraded to Windows Server 2016 or later, then upgraded to version 12.0.2 and later. Workstations are unaffected. 4. Certificate Validation for SSPM Agents: - For Windows and macOS Agents, server certificate validation is disabled by default. However, if your server domain includes these Agents, server certificate validation will be automatically enabled and enforced. 5. Bug Fixes: - Windows: - Fixed an issue causing incorrect reporting of the number of computers and their associated groups. - Fixed an issue where elevation of Universal Windows Platform (UWP) applications failed to properly handle third-party store applications when using "Run as different user". - Fixed an issue where the Windows agent caused incorrect UAC elevation on Windows 11, version 24H2. - Fixed an issue where using SHIFT+right-click > Run as different user, or using the RUNAS.EXE tool, or when configured to log in as a local or domain user, resulted in ReadEvent() errors being logged to ACS (Application Control Service). - macOS: - Fixed an issue where the sudo plugin on macOS sometimes failed to apply policies to command-line tools, most notably after the Mac agent has been running for some time. This information provides key details about vulnerabilities and fixes for Windows and macOS Agents in Privilege Manager.

Goal Reached Thanks to every supporter — we hit 100%!

OneIdentity Privilege Manager Agent Security Patch Advisory (v12.0.2150)