Lucene search

K
nvd[email protected]NVD:CVE-2024-24892
HistoryMar 25, 2024 - 7:15 a.m.

CVE-2024-24892

2024-03-2507:15:50
CWE-269
CWE-78
web.nvd.nist.gov
1
cve-2024-24892
improper neutralization
os command injection
privilege management
openeuler migration-tools
restful privilege elevation
linux

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

0.0004 Low

EPSS

Percentile

9.8%

Improper Neutralization of Special Elements used in an OS Command (β€˜OS Command Injection’), Improper Privilege Management vulnerability in openEuler migration-tools on Linux allows Command Injection, Restful Privilege Elevation. This vulnerability is associated with program files https://gitee.Com/openeuler/migration-tools/blob/master/index.Py.

This issue affects migration-tools: from 1.0.0 through 1.0.1.

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

0.0004 Low

EPSS

Percentile

9.8%

Related for NVD:CVE-2024-24892