CVE-2024-24562
Medium
Description
vantage6-UI is the official user interface for the vantage6 server. In affected versions a number of security headers are not set. This issue has been addressed in commit `68dfa6614` which is expected to be included in future releases. Users are advised to upgrade when a new release is made. While an upgrade path is not available users may modify the docker image build to insert the headers into nginx.
SeverityMedium
CVSS5.4
Exploit probability—
ProductVantage6-ui
PublishedMar 14, 2024
First seenMar 14, 2024
Weakness typeCWE-693CWE-693CWE-668CWE-668
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vantage6 vantage6-ui | v ≤ 4.2.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.