Lucene search

MitreVULNRICHMENT:CVE-2024-37382

HistoryAug 08, 2024 - 12:00 a.m.

CVE-2024-37382

2024-08-0800:00:00

mitre

github.com

vulnerability

arbitrary code execution

server configuration modification

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

18.9%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

An issue discovered in import host feature in Ab Initio Metadata Hub and Authorization Gateway before 4.3.1.1 allows attackers to run arbitrary code via crafted modification of server configuration.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:abinitio:metadata_hub:*:*:*:*:*:*:*:*"
    ],
    "vendor": "abinitio",
    "product": "metadata_hub",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "4.1.4.9",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:abinitio:metadata_hub:4.1.5.10:*:*:*:*:*:*:*"
    ],
    "vendor": "abinitio",
    "product": "metadata_hub",
    "versions": [
      {
        "status": "affected",
        "version": "4.1.5.10"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:abinitio:metadata_hub:4.1.6.11:*:*:*:*:*:*:*"
    ],
    "vendor": "abinitio",
    "product": "metadata_hub",
    "versions": [
      {
        "status": "affected",
        "version": "4.1.6.11"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:abinitio:metadata_hub:4.2.1.6:*:*:*:*:*:*:*"
    ],
    "vendor": "abinitio",
    "product": "metadata_hub",
    "versions": [
      {
        "status": "affected",
        "version": "4.2.1.6"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:abinitio:metadata_hub:4.2.2.8:*:*:*:*:*:*:*"
    ],
    "vendor": "abinitio",
    "product": "metadata_hub",
    "versions": [
      {
        "status": "affected",
        "version": "4.2.2.8"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:abinitio:metadata_hub:4.2.3.4:*:*:*:*:*:*:*"
    ],
    "vendor": "abinitio",
    "product": "metadata_hub",
    "versions": [
      {
        "status": "affected",
        "version": "4.2.3.4"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:abinitio:metadata_hub:4.3.1.0:*:*:*:*:*:*:*"
    ],
    "vendor": "abinitio",
    "product": "metadata_hub",
    "versions": [
      {
        "status": "affected",
        "version": "4.3.1.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

www.abinitio.com/en/security-advisories/ab-2024-003/