Skip to content

Commit 7a62eda

Browse files
committed
fix: CWE-269 Mezmo Agent <= 3.9.0 Local Elevation of Privileges (#554)
- added -NoProfile to ps execution of post install script to avoid execution of current user profile scripts (repair case) Ref: LOG-17865
1 parent d28f51a commit 7a62eda

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

packaging/windows/msi/mezmo-agent.wxs

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@
2525
<Property Id="powershell" Value="powershell.exe" />
2626
<Property Id="KEY" Secure="yes" Value="&lt;YOUR_INGESTION_KEY&gt;"/>
2727
<CustomAction Id="PostInstall"
28-
ExeCommand="-WindowStyle Hidden -ExecutionPolicy Bypass -File &quot;[#PostInstallScript]&quot; -INGESTION_KEY &quot;[KEY]&quot; -INSTALLFOLDER &quot;[INSTALLFOLDER]\&quot; -DATAFOLDER &quot;[DATAFOLDER]\&quot;"
28+
ExeCommand="-WindowStyle Hidden -NoProfile -ExecutionPolicy Bypass -File &quot;[#PostInstallScript]&quot; -INGESTION_KEY &quot;[KEY]&quot; -INSTALLFOLDER &quot;[INSTALLFOLDER]\&quot; -DATAFOLDER &quot;[DATAFOLDER]\&quot;"
2929
Execute="deferred"
3030
Property="powershell"
3131
Impersonate="no"

0 commit comments

Comments
 (0)