CVE-2024-41628
High
Description
Directory Traversal vulnerability in Severalnines Cluster Control 1.9.8 before 1.9.8-9778, 2.0.0 before 2.0.0-9779, and 2.1.0 before 2.1.0-9780 allows a remote attacker to include and display file content in an HTTP request via the CMON API.
SeverityHigh
CVSS7.5
Exploit probability—
ProductSeveralnines Clustercontrol
PublishedJul 26, 2024
First seenJul 26, 2024
Weakness typeCWE-22Path traversal
How to fix
Update
- severalnines clustercontrol1.9.8-9778, 2.0.0-9779, 2.1.0-9780 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| severalnines clustercontrol | 1.9.8 ≤ v < 1.9.8-9778, 2.0.0 ≤ v < 2.0.0-9779, 2.1.0 ≤ v < 2.1.0-9780 | 1.9.8-9778, 2.0.0-9779, 2.1.0-9780 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.