CVE-2024-37382

CVSS 6.3 MEDIUMEPSS 0.4%CWE-94

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 6.3EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

08 Aug 2024Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

An issue discovered in import host feature in Ab Initio Metadata Hub and Authorization Gateway before 4.3.1.1 allows attackers to run arbitrary code via crafted modification of server configuration.

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L

Affected products

n/a · n/a

References

https://www.abinitio.com/en/security-advisories/ab-2024-003/