AZL-52174 CVE-2024-51744 affecting package azcopy for versions less than 10.25.1-4

🗓️ 04 Nov 2024 22:15:03Reported by GoogleType

osv🔗 osv.dev👁 12 Views

AZCopy before 10.25.1-4 and golang-jwt fix 4.5.1: ParseWithClaims returns dangerous errors.

Reporter	Title	Published	Views	Family All 384
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a sensitive information exposure in golang-jwt [CVE-2024-51744]	27 Feb 202517:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Security Bypass.	24 Aug 202618:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Edge Application Manager.	15 Apr 202503:26	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion HCI and IBM Fusion HCI for watsonx	31 May 202514:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar EDR Software contains multiple vulnerabilities	14 Mar 202510:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses multiple third party libraries which is vulnerable to multiple CVEs	3 Nov 202508:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	19 Dec 202416:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in QRadar Suite Software	13 Mar 202619:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which are vulnerable to CVEs.	27 Feb 202609:44	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-51744

21 Apr 2026 04:33Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.13.1

EPSS0.0051

SSVC

azcopy versions before golang jwt fix dangerous errors