Forum Discussion

IBUS's avatar
IBUS
Active Contributor
2 years ago
Solved

GoToAssist Agent Vulnerabilities

Our Microsoft Defender Endpoint reported vulnerabilities in Openssl for the following GoToAssist agent files. I asked GoToAssist support but they don't have an estimated time frame of resolution. Sho...
Kaz111's avatar
Kaz111
Active Contributor
2 years ago

Interesting.  I wonder why the difference in installation and file location between Win 10 (Pro in my case) vs. your Win 11???  Do you have anything under: AppData\Local\Programs\LogMeIn\GoToAssist Agent Desktop Console

IBUS's avatar
IBUS
Active Contributor
2 years ago

There is no LogMeIn folder under my AppData\Local\Programs

  • GlennD's avatar
    GlennD
    GoTo Manager
    2 years ago

    Hi IBUS, welcome to the community.

     

    I can confirm that we have an update to GoToAssist Remote Support v5 coming that will update the version of OpenSSL being used (final release date still to be confirmed). 

    With GoToAssist Remote Support v4 I am waiting for some final details, but my understanding is that because we accepts TLS v1-2 on the server side this is not a concern.

     

     

    • DaveK153's avatar
      DaveK153
      New Contributor
      12 months ago

      Has this issue been resolved yet in terms of release of new client with updated OpenSSL?? We are getting OpenSSL vulnerabilities scores in MS Defender and they all seem to be related to the unassisted client.

      • GlennD's avatar
        GlennD
        GoTo Manager
        12 months ago

        Hi DaveK153, welcome to the community.

         

        The current status is GTA v5 is using v3.0.13 of OpenSSL and our team will be updating to v3.0.14 as soon as possible after it is released. It appears OpenSSL sees this as a low severity https://www.openssl.org/news/secadv/20240408.txt 

         

    • IBUS's avatar
      IBUS
      Active Contributor
      2 years ago

      Thank you for the good news. I will wait it.