CVE Vulnerabilities

CVE-2024-24892

Improper Privilege Management

Published: Mar 25, 2024 | Modified: Mar 25, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Improper Neutralization of Special Elements used in an OS Command (OS Command Injection), Improper Privilege Management vulnerability in openEuler migration-tools on Linux allows Command Injection, Restful Privilege Elevation. This vulnerability is associated with program files https://gitee.Com/openeuler/migration-tools/blob/master/index.Py.

This issue affects migration-tools: from 1.0.0 through 1.0.1.

Weakness

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Potential Mitigations

References