CVE-2024-41922

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-41922
A directory traversal vulnerability exists in the log files download functionality of Veertu Anka Build 1.42.0. A specially crafted HTTP request can result in a disclosure of arbitrary files. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://talosintelligence.com/vulnerability_reports/TALOS-2024-2061 Exploit Third Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2061
Configurations

Configuration 1 (hide)

cpe:2.3:a:veertu:anka_build_cloud:1.42.0:*:*:*:*:*:*:*
History

21 Nov 2024, 09:33

Type Values Removed Values Added
References
  • () https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2061 -

08 Oct 2024, 14:48

Type Values Removed Values Added
First Time Veertu anka Build Cloud
Veertu
References () https://talosintelligence.com/vulnerability_reports/TALOS-2024-2061 - () https://talosintelligence.com/vulnerability_reports/TALOS-2024-2061 - Exploit, Third Party Advisory
CPE cpe:2.3:a:veertu:anka_build_cloud:1.42.0:*:*:*:*:*:*:*

04 Oct 2024, 13:50

Type Values Removed Values Added
Summary
  • (es) Existe una vulnerabilidad de directory traversal en la funcionalidad de descarga de archivos de registro de Veertu Anka Build 1.42.0. Una solicitud HTTP especialmente manipulada puede dar como resultado la divulgación de archivos arbitrarios. Un atacante puede realizar una solicitud HTTP no autenticada para activar esta vulnerabilidad.

03 Oct 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-03 16:15

Updated : 2024-11-21 09:33

NVD link : CVE-2024-41922

Mitre link : CVE-2024-41922

CVE.ORG link : CVE-2024-41922

JSON object : View

Products Affected

veertu

  • anka_build_cloud
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')