CVE-2024-6891 Journyx Authenticated Remote Code Execution

2024-08-0723:13:56

CWE-95

CWE-94

KoreLogic

www.cve.org

cve-2024-6891

journyx

code execution

authentication

python

vulnerability

EPSS

0.001

Percentile

18.9%

JSON

Attackers with a valid username and password can exploit a python code injection vulnerability during the natural login flow.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "Journyx (jtime)",
    "vendor": "Journyx",
    "versions": [
      {
        "status": "affected",
        "version": "11.5.4"
      }
    ]
  }
]

References

korelogic.com/Resources/Advisories/KL-001-2024-008.txt

EPSS

0.001

Percentile

18.9%

JSON

Related for CVELIST:CVE-2024-6891