Exciting changes are coming as we upgrade our community website. You may notice a fresh new look and some differences in how things work. We will post more details soon and can’t wait to welcome you to our improved space!

Forum Discussion

IBUS's avatar
IBUS
Active Contributor
2 years ago
Solved

GoToAssist Agent Vulnerabilities

Our Microsoft Defender Endpoint reported vulnerabilities in Openssl for the following GoToAssist agent files. I asked GoToAssist support but they don't have an estimated time frame of resolution. Should we find other remote tool?

 

c:\program files\goto\gotoassist agent desktop console\libssl-3-x64.dll
c:\program files\goto\gotoassist agent desktop console\libcrypto-3-x64.dll

 

Associated CVEs (Severity): CVE-2023-2650 (High), CVE-2023-4807 (High), CVE-2023-0464 (Medium), CVE-2023-6129 (Medium), CVE-2023-2975 (Medium), CVE-2023-5363 (Medium).

 

14 Replies

  • CRBigBusTours's avatar
    CRBigBusTours
    New Member
    2 years ago

    Hi GlennD,

    We're trying to tackle a ton of OpenSSL vulnerabilities and GTA is one of our biggest hitters. Do you know if this has been patched to v3.0.14?

    Thanks

  • DaveK153's avatar
    DaveK153
    New Contributor
    2 years ago

    Has this issue been resolved yet in terms of release of new client with updated OpenSSL?? We are getting OpenSSL vulnerabilities scores in MS Defender and they all seem to be related to the unassisted client.

  • IBUS's avatar
    IBUS
    Active Contributor
    2 years ago

    Thank you for the good news. I will wait it.

  • GlennD's avatar
    GlennD
    GoTo Manager
    2 years ago

    Hi IBUS, welcome to the community.

     

    I can confirm that we have an update to GoToAssist Remote Support v5 coming that will update the version of OpenSSL being used (final release date still to be confirmed). 

    With GoToAssist Remote Support v4 I am waiting for some final details, but my understanding is that because we accepts TLS v1-2 on the server side this is not a concern.

     

     

  • IBUS's avatar
    IBUS
    Active Contributor
    2 years ago

    There is no LogMeIn folder under my AppData\Local\Programs

  • Kaz111's avatar
    Kaz111
    Active Contributor
    2 years ago

    Interesting.  I wonder why the difference in installation and file location between Win 10 (Pro in my case) vs. your Win 11???  Do you have anything under: AppData\Local\Programs\LogMeIn\GoToAssist Agent Desktop Console

  • IBUS's avatar
    IBUS
    Active Contributor
    2 years ago

    I downloaded 64-bit version (G2AAgentDesktopConsole-x64.msi) and installed, then files are extracted under　C:\Program Files\GoTo\GoToAssist Agent Desktop Console. Our OS is Win11.