Lucene search
HistoryAug 22, 2024 - 6:15 p.m.
CVE-2024-7634
nginx
agent
restriction
vulnerability
attacker
files
directory
CVSS3
4.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
EPSS
0
Percentile
11.1%
NGINX Agent’s “config_dirs” restriction feature allows a highly privileged attacker to gain the ability to write/overwrite files outside of the designated secure directory.
References
Related
f5
f5
K000140630: NGINX Agent vulnerability CVE-2024-7634
2024-08-22 00:00:00
cve
cve
CVE-2024-7634
2024-08-22 18:15:10
vulnrichment
vulnrichment
CVE-2024-7634 NGINX Agent Vulnerability
2024-08-22 18:07:31
redhatcve
redhatcve
CVE-2024-7634
2024-09-09 22:13:59
cvelist
cvelist
CVE-2024-7634 NGINX Agent Vulnerability
2024-08-22 18:07:31
CVSS3
4.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
EPSS
0
Percentile
11.1%
Related for NVD:CVE-2024-7634