CVEvulnerability

CVE-2024-11075

8.8 HIGH Published 2024-11-19 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2024-11-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-250

Description

A vulnerability in the Incoming Goods Suite allows a user with unprivileged access to the underlying system (e.g. local or via SSH) a privilege escalation to the administrative level due to the usage of component vendor Docker images running with root permissions. Exploiting this misconfiguration leads to the fact that an attacker can gain administrative control. over the whole system.

Related

Weakness · CWE (1)

  • CWE-250 Execution with Unnecessary Privileges weakness

References