CVE-2024-39934

CVSS 7.8 HIGHEPSS 0.2%CWE-284

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 7.8EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

04 jul 2024Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Robotmk before 2.0.1 allows a local user to escalate privileges (e.g., to SYSTEM) if automated Python environment setup is enabled, because the "shared holotree usage" feature allows any user to edit any Python environment.

CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:N

Produtos afetados

n/a · n/a

Referências

https://checkmk.com/werk/16434 https://github.com/elabit/robotmk/commit/78c1174ab2df43813050d0c22e1efb8636f8715e https://github.com/elabit/robotmk/compare/v2.0.0...v2.0.1 https://github.com/elabit/robotmk/releases/tag/v2.0.1