CVE-2024-42449 in Service Provider Console

Résumé

par MITRE • 04/12/2024

From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is possible to remove arbitrary files on the VSPC server machine.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsable: Hackerone
• Réserver: 02/08/2024
• Divulgation: 04/12/2024
• Modérer: accepté
• Entrée: VDB-286813
• CPE: prêt
• CWE: CWE-285 (confirmé)
• CVSS: 7.1 (CNA)
• EPSS: 0.05368
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-42449
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-42449
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-42449/