CVE-2024-24892

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-24892
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Improper Privilege Management vulnerability in openEuler migration-tools on Linux allows Command Injection, Restful Privilege Elevation. This vulnerability is associated with program files https://gitee.Com/openeuler/migration-tools/blob/master/index.Py. This issue affects migration-tools: from 1.0.0 through 1.0.1.

8.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://gitee.com/src-openeuler/migration-tools/pulls/12
https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1275
Configurations

No configuration.

History

No history.

Information

Published : 2024-03-25 07:15

Updated : 2024-03-25 13:47

NVD link : CVE-2024-24892

Mitre link : CVE-2024-24892

CVE.ORG link : CVE-2024-24892

JSON object : View

Products Affected

No product.

CWE
CWE-269

Improper Privilege Management

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')