CVE-2024-22047: falha de baixa gravidade em audited
Audited Log Integrity Errors Due to Race Condition
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.1epss 0.5%
A race condition exists in Audited 4.0.0 before 5.3.3 that can result in an authenticated user to cause audit log entries to be attributed to another user.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
Produtos afetados
auditedReferências
https://github.com/advisories/GHSA-hjp3-5g2q-7jwwhttps://github.com/collectiveidea/audited/issues/601https://github.com/collectiveidea/audited/pull/669https://github.com/collectiveidea/audited/pull/671https://github.com/collectiveidea/audited/security/advisories/GHSA-hjp3-5g2q-7jwwhttps://vulncheck.com/advisories/vc-advisory-GHSA-hjp3-5g2q-7jww