deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-24857
Published: 2024-02-05
Description: A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function. This can result in integrity overflow issue, possibly leading to bluetooth connection abnormality or denial of service.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-362, CWE-190, CWE-362
References: https://bugzilla.openanolis.cn/show_bug.cgi?id=8155; https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html; https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
CVE: CVE-2024-24858
Published: 2024-02-05
Description: A race condition was found in the Linux kernel's net/bluetooth in {conn,adv}_{min,max}_interval_set() function. This can result in I2cap connection or broadcast abnormality issue, possibly leading to denial of service.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://bugzilla.openanolis.cn/show_bug.cgi?id=8154; https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html; https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
CVE: CVE-2024-24859
Published: 2024-02-05
Description: A race condition was found in the Linux kernel's net/bluetooth in sniff_{min,max}_interval_set() function. This can result in a bluetooth sniffing exception issue, possibly leading denial of service.








CVSS Score: 4.6 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://bugzilla.openanolis.cn/show_bug.cgi?id=8153; https://bugzilla.openanolis.cn/show_bug.cgi?id=8153
CVE: CVE-2024-24860
Published: 2024-02-05
Description: A race condition was found in the Linux kernel's bluetooth device driver in {min,max}_key_size_set() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-362, CWE-362, CWE-476
References: https://bugzilla.openanolis.cn/show_bug.cgi?id=8151; https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html; https://bugzilla.openanolis.cn/show_bug.cgi?id=8151
CVE: CVE-2024-24861
Published: 2024-02-05
Description: A race condition was found in the Linux kernel's media/xc4000 device driver in xc4000 xc4000_get_frequency() function. This can result in return value overflow issue, possibly leading to malfunction or denial of service issue.
CVSS Score: 3.3 (LOW)
CWE: CWE-362, CWE-362
References: https://bugzilla.openanolis.cn/show_bug.cgi?id=8150; https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html; https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
CVE: CVE-2024-24864
Published: 2024-02-05
Description: A race condition was found in the Linux kernel's media/dvb-core in dvbdmx_write() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.





CVSS Score: 5.3 (MEDIUM)
CWE: CWE-362, CWE-362, CWE-476
References: https://bugzilla.openanolis.cn/show_bug.cgi?id=8178; https://bugzilla.openanolis.cn/show_bug.cgi?id=8178
CVE: CVE-2021-4436
Published: 2024-02-05
Description: The 3DPrint Lite WordPress plugin before 1.9.1.5 does not have any authorisation and does not check the uploaded file in its p3dlite_handle_upload AJAX action , allowing unauthenticated users to upload arbitrary file to the web server. However, there is a .htaccess, preventing the file to be accessed on Web servers such as Apache.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://wpscan.com/vulnerability/c46ecd0d-a132-4ad6-b936-8acde3a09282/; https://wpscan.com/vulnerability/c46ecd0d-a132-4ad6-b936-8acde3a09282/
CVE: CVE-2023-5249
Published: 2024-02-05
Description: Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper memory processing operations to exploit a software race condition. If the system’s memory is carefully prepared by the user, then this in turn cause a use-after-free.This issue affects Bifrost GPU Kernel Driver: from r35p0 through r40p0; Valhall GPU Kernel Driver: from r35p0 through r40p0.


CVSS Score: 7.0 (HIGH)
CWE: CWE-416, CWE-416
References: https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities; https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
CVE: CVE-2023-5643
Published: 2024-02-05
Description: Out-of-bounds Write vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations. Depending on the configuration of the Mali GPU Kernel Driver, and if the system’s memory is carefully prepared by the user, then this in turn could write to memory outside of buffer bounds.This issue affects Bifrost GPU Kernel Driver: from r41p0 through r45p0; Valhall GPU Kernel Driver: from r41p0 through r45p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r45p0.


CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787, CWE-787
References: https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities; https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
CVE: CVE-2024-1225
Published: 2024-02-05
Description: A vulnerability classified as critical was found in QiboSoft QiboCMS X1 up to 1.0.6. Affected by this vulnerability is the function rmb_pay of the file /application/index/controller/Pay.php. The manipulation of the argument callback_class leads to deserialization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252847. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-502
References: https://note.zhaoj.in/share/jDWk6INLzO12; https://vuldb.com/?ctiid.252847; https://vuldb.com/?id.252847
CVE: CVE-2024-23108
Published: 2024-02-05
Description: An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet  allows attacker to execute unauthorized code or commands via via crafted API requests.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-78
References: https://fortiguard.com/psirt/FG-IR-23-130; https://fortiguard.com/psirt/FG-IR-23-130; https://github.com/horizon3ai/CVE-2024-23108
CVE: CVE-2024-23109
Published: 2024-02-05
Description: An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet  allows attacker to execute unauthorized code or commands via via crafted API requests.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://fortiguard.com/psirt/FG-IR-23-130; https://fortiguard.com/psirt/FG-IR-23-130
CVE: CVE-2023-52138
Published: 2024-02-05
Description: Engrampa is an archive manager for the MATE environment. Engrampa is found to be vulnerable to a Path Traversal vulnerability that can be leveraged to achieve full Remote Command Execution (RCE) on the target. While handling CPIO archives, the Engrampa Archive manager follows symlink, cpio by default will follow stored symlinks while extracting and the Archiver will not check the symlink location, which leads to arbitrary file writes to unintended locations. When the victim extracts the archive, the attacker can craft a malicious cpio or ISO archive to achieve RCE on the target system. This vulnerability was fixed in commit 63d5dfa.
CVSS Score: 8.2 (HIGH)
CWE: CWE-25, CWE-22, CWE-59
References: https://github.com/mate-desktop/engrampa/commit/63d5dfa9005c6b16d0f0ccd888cc859fca78f970; https://github.com/mate-desktop/engrampa/security/advisories/GHSA-c98h-v39w-3r7v; https://lists.debian.org/debian-lts-announce/2024/02/msg00011.html
CVE: CVE-2023-7216
Published: 2024-02-05
Description: A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker to trick a user into opening a specially crafted archive. During the extraction process, the archiver could follow symlinks outside of the intended directory, which allows files to be written in arbitrary directories through symlinks.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-59, CWE-22, CWE-59
References: https://access.redhat.com/security/cve/CVE-2023-7216; https://bugzilla.redhat.com/show_bug.cgi?id=2249901; https://access.redhat.com/security/cve/CVE-2023-7216
CVE: CVE-2024-24762
Published: 2024-02-05
Description: `python-multipart` is a streaming multipart parser for Python. When using form data, `python-multipart` uses a Regular Expression to parse the HTTP `Content-Type` header, including options. An attacker could send a custom-made `Content-Type` option that is very difficult for the RegEx to process, consuming CPU resources and stalling indefinitely (minutes or more) while holding the main event loop. This means that process can't handle any more requests, leading to regular expression denial of service. This vulnerability has been patched in version 0.0.7.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-1333
References: https://github.com/Kludex/python-multipart/commit/20f0ef6b4e4caf7d69a667c54dff57fe467109a4; https://github.com/Kludex/python-multipart/security/advisories/GHSA-2jv5-9r88-3w3p; https://github.com/andrew-d/python-multipart/blob/d3d16dae4b061c34fe9d3c9081d9800c49fc1f7a/multipart/multipart.py#L72-L74
CVE: CVE-2024-24768
Published: 2024-02-05
Description: 1Panel is an open source Linux server operation and maintenance management panel. The HTTPS cookie that comes with the panel does not have the Secure keyword, which may cause the cookie to be sent in plain text if accessed using HTTP. This issue has been patched in version 1.9.6.


CVSS Score: 6.5 (MEDIUM)
CWE: CWE-315, CWE-311
References: https://github.com/1Panel-dev/1Panel/commit/[PII_REDACTED]c4b9b48e0b4aa508f9dea4d6bc50d5; https://github.com/1Panel-dev/1Panel/pull/3817; https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-9xfw-jjq2-7v8h
CVE: CVE-2023-47355
Published: 2024-02-05
Description: The com.eypcnnapps.quickreboot (aka Eyuep Can Yilmaz {ROOT] Quick Reboot) application 1.0.8 for Android has exposed broadcast receivers for PowerOff, Reboot, and Recovery (e.g., com.eypcnnapps.quickreboot.widget.PowerOff) that are susceptible to unauthorized broadcasts because of missing input validation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/actuator/com.eypcnnapps.quickreboot/blob/main/CWE-925.md; https://play.google.com/store/apps/details?id=com.eypcnnapps.quickreboot; https://github.com/actuator/com.eypcnnapps.quickreboot/blob/main/CWE-925.md
CVE: CVE-2024-0323
Published: 2024-02-05
Description: The FTP server used on the B&R
Automation Runtime supports unsecure encryption mechanisms, such as SSLv3,
TLSv1.0 and TLS1.1. An network-based attacker can exploit the flaws to conduct
man-in-the-middle attacks or to decrypt communications between the affected product
clients.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1240
References: https://www.br-automation.com/fileadmin/SA23P004_FTP_uses_unsecure_encryption_mechanisms-f57c147c.pdf; https://www.br-automation.com/fileadmin/SA23P004_FTP_uses_unsecure_encryption_mechanisms-f57c147c.pdf
CVE: CVE-2024-23054
Published: 2024-02-05
Description: An issue in Plone Docker Official Image 5.2.13 (5221) open-source software that could allow for remote code execution due to a package listed in ++plone++static/components not existing in the public package index (npm).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-427, CWE-427
References: http://plone.com; http://ploneorg.com; https://github.com/c0d3x27/CVEs/blob/main/CVE-2024-23054/README.md
CVE: CVE-2024-24397
Published: 2024-02-05
Description: Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code via a crafted payload to the ReportName field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://stimulsoft.com; https://cloud-trustit.spp.at/s/Pi78FFazHamJQ5R; https://cves.at/posts/cve-2024-24397/writeup/
CVE: CVE-2024-24468
Published: 2024-02-05
Description: Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the add_customblock.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://github.com/tang-0717/cms/blob/main/3.md; https://github.com/tang-0717/cms/blob/main/3.md
CVE: CVE-2024-24469
Published: 2024-02-05
Description: Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the delete_post .php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-94
References: https://github.com/tang-0717/cms/blob/main/2.md; https://github.com/tang-0717/cms/blob/main/2.md
CVE: CVE-2024-0953
Published: 2024-02-05
Description: When a user scans a QR Code with the QR Code Scanner feature, the user is not prompted before being navigated to the page specified in the code.  This may surprise the user and potentially direct them to unwanted content. This vulnerability affects Firefox for iOS < 129.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1837916; https://www.mozilla.org/security/advisories/mfsa2024-36/; https://bugzilla.mozilla.org/show_bug.cgi?id=1837916
CVE: CVE-2023-6028
Published: 2024-02-05
Description: A reflected
cross-site scripting (XSS) vulnerability exists in the SVG version of System
Diagnostics Manager of B&R Automation Runtime versions <= G4.93 that
enables a remote attacker to execute arbitrary JavaScript code in the context
of the attacked user’s browser session.








CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.br-automation.com/fileadmin/SA23P018_SDM_Web_interface_vulnerable_to_XSS-1d75bee8.pdf; https://www.br-automation.com/fileadmin/SA23P018_SDM_Web_interface_vulnerable_to_XSS-1d75bee8.pdf
CVE: CVE-2023-6874
Published: 2024-02-05
Description: Prior to v7.4.0, Ember ZNet is vulnerable to a denial of service attack through manipulation of the NWK sequence number
CVSS Score: 7.5 (HIGH)
CWE: CWE-312, CWE-754
References: https://community.silabs.com/069Vm000000WXaOIAW; https://github.com/SiliconLabs/gecko_sdk; https://community.silabs.com/069Vm000000WXaOIAW
CVE: CVE-2024-24258
Published: 2024-02-05
Description: freeglut 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddSubMenu function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401, CWE-401
References: https://github.com/freeglut/freeglut/pull/155; https://github.com/yinluming13579/mupdf_defects/blob/main/mupdf_detect_1.md; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IBAWX3HMMZVAWJZ3U6VOAYYOYJCN3IS/
CVE: CVE-2024-24259
Published: 2024-02-05
Description: freeglut through 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddMenuEntry function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401, CWE-401
References: https://github.com/freeglut/freeglut/pull/155; https://github.com/yinluming13579/mupdf_defects/blob/main/mupdf_detect_2.md; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IBAWX3HMMZVAWJZ3U6VOAYYOYJCN3IS/
CVE: CVE-2024-24260
Published: 2024-02-05
Description: media-server v1.0.0 was discovered to contain a Use-After-Free (UAF) vulnerability via the sip_subscribe_remove function at /uac/sip-uac-subscribe.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416, CWE-416
References: https://github.com/yinluming13579/media-server_defects/blob/main/media-server_1.md; https://github.com/yinluming13579/media-server_defects/blob/main/media-server_1.md
CVE: CVE-2024-24262
Published: 2024-02-05
Description: media-server v1.0.0 was discovered to contain a Use-After-Free (UAF) vulnerability via the sip_uac_stop_timer function at /uac/sip-uac-transaction.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416, CWE-416
References: https://github.com/LuMingYinDetect/media-server_detect/blob/main/media_server_detect_1.md; https://github.com/LuMingYinDetect/media-server_detect/blob/main/media_server_detect_1.md
CVE: CVE-2024-24263
Published: 2024-02-05
Description: Lotos WebServer v0.1.1 was discovered to contain a Use-After-Free (UAF) vulnerability via the response_append_status_line function at /lotos/src/response.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416, CWE-416
References: https://github.com/LuMingYinDetect/lotos_detects/blob/main/lotos_detect_1.md; https://github.com/LuMingYinDetect/lotos_detects/blob/main/lotos_detect_1.md
CVE: CVE-2024-24265
Published: 2024-02-05
Description: gpac v2.2.1 was discovered to contain a memory leak via the dst_props variable in the gf_filter_pid_merge_properties_internal function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401, CWE-401
References: https://github.com/yinluming13579/gpac_defects/blob/main/gpac_1.md; https://github.com/yinluming13579/gpac_defects/blob/main/gpac_1.md
CVE: CVE-2024-24266
Published: 2024-02-05
Description: gpac v2.2.1 was discovered to contain a Use-After-Free (UAF) vulnerability via the dasher_configure_pid function at /src/filters/dasher.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416, CWE-416
References: https://github.com/yinluming13579/gpac_defects/blob/main/gpac_2.md; https://github.com/yinluming13579/gpac_defects/blob/main/gpac_2.md
CVE: CVE-2024-24267
Published: 2024-02-05
Description: gpac v2.2.1 (fixed in v2.4.0) was discovered to contain a memory leak via the gfio_blob variable in the gf_fileio_from_blob function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401, CWE-401
References: https://github.com/NixOS/nixpkgs/pull/305402; https://github.com/gpac/gpac/commit/d28d9ba45cf4f628a7b2c351849a895e6fcf2234; https://github.com/gpac/gpac/issues/2571
CVE: CVE-2024-24396
Published: 2024-02-05
Description: Cross Site Scripting vulnerability in Stimulsoft GmbH Stimulsoft Dashboard.JS before v.2024.1.2 allows a remote attacker to execute arbitrary code via a crafted payload to the search bar component.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-94
References: http://stimulsoft.com; https://cloud-trustit.spp.at/s/Pi78FFazHamJQ5R; https://cves.at/posts/cve-2024-24396/writeup/
CVE: CVE-2024-22202
Published: 2024-02-05
Description: phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. phpMyFAQ's user removal page allows an attacker to spoof another user's detail, and in turn make a compelling phishing case for removing another user's account. The front-end of this page doesn't allow changing the form details, an attacker can utilize a proxy to intercept this request and submit other data. Upon submitting this form, an email is sent to the administrator informing them that this user wants to delete their account. An administrator has no way of telling the difference between the actual user wishing to delete their account or the attacker issuing this for an account they do not control. This issue has been patched in version 3.2.5.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-284
References: https://github.com/thorsten/phpMyFAQ/commit/1348dcecdaec5a5714ad567c[PII_REDACTED]b534d; https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-6648-6g96-mg35; https://github.com/thorsten/phpMyFAQ/commit/1348dcecdaec5a5714ad567c[PII_REDACTED]b534d
CVE: CVE-2024-22567
Published: 2024-02-05
Description: File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/upload.do.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/h3ak/MCMS-CVE-Request/; https://github.com/h3ak/MCMS-CVE-Request/
CVE: CVE-2023-27318
Published: 2024-02-05
Description: StorageGRID (formerly StorageGRID Webscale) versions 11.6.0 through 
11.6.0.13 are susceptible to a Denial of Service (DoS) vulnerability. A 
successful exploit could lead to a crash of the Local Distribution 
Router (LDR) service.


CVSS Score: 6.5 (MEDIUM)
CWE: CWE-248
References: https://security.netapp.com/advisory/NTAP-20[PII_REDACTED]/; https://security.netapp.com/advisory/NTAP-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-50781
Published: 2024-02-05
Description: A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-203, CWE-203
References: https://access.redhat.com/security/cve/CVE-2023-50781; https://bugzilla.redhat.com/show_bug.cgi?id=2254426; https://access.redhat.com/security/cve/CVE-2023-50781
CVE: CVE-2023-50782
Published: 2024-02-05
Description: A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-203, CWE-203
References: https://access.redhat.com/security/cve/CVE-2023-50782; https://bugzilla.redhat.com/show_bug.cgi?id=2254432; https://access.redhat.com/security/cve/CVE-2023-50782
CVE: CVE-2023-51951
Published: 2024-02-05
Description: SQL Injection vulnerability in Stock Management System 1.0 allows a remote attacker to execute arbitrary code via the id parameter in the manage_bo.php file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://www.exploit-db.com/exploits/51990; https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2023-004; https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2023-004
CVE: CVE-2024-0202
Published: 2024-02-05
Description: A security vulnerability has been identified in the cryptlib cryptographic library when cryptlib is compiled with the support for RSA key exchange ciphersuites in TLS (by setting the USE_RSA_SUITES define), it will be vulnerable to the timing variant of the Bleichenbacher attack. An attacker that is able to perform a large number of connections to the server will be able to decrypt RSA ciphertexts or forge signatures using server's certificate. THIS CVE ID IS CURRENTLY DISPUTED - MAINTAINER NOTE: There are only two situations where it's enabled, one is for fuzz-testing to exercise code paths that wouldn't otherwise be available, the other is for static source code analysis with tools like Coverity and Prefast, again to open up code paths that otherwise wouldn't be available.  It can also be enabled manually in two specific test builds just to make sure the code still compiles OK, to avoid bit rot and verify that the fuzz-testing build will compile without errors.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-208, CWE-203
References: https://bugzilla.redhat.com/show_bug.cgi?id=2256518; https://bugzilla.redhat.com/show_bug.cgi?id=2256518
CVE: CVE-2024-1052
Published: 2024-02-05
Description: Boundary and Boundary Enterprise (“Boundary”) is vulnerable to session hijacking through TLS certificate tampering. An attacker with privileges to enumerate active or pending sessions, obtain a private key pertaining to a session, and obtain a valid trust on first use (TOFU) token may craft a TLS certificate to hijack an active session and gain access to the underlying service or application.
CVSS Score: 8.0 (HIGH)
CWE: CWE-295, CWE-295
References: https://discuss.hashicorp.com/t/hcsec-2024-02-boundary-vulnerable-to-session-hijacking-through-tls-certificate-tampering/62458; https://discuss.hashicorp.com/t/hcsec-2024-02-boundary-vulnerable-to-session-hijacking-through-tls-certificate-tampering/62458