CVEvulnerability

CVE-2024-37382

7.2 HIGH Published 2024-08-08 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-08-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
6.3 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
Weaknesses
CWE-94

Description

An issue discovered in import host feature in Ab Initio Metadata Hub and Authorization Gateway before 4.3.1.1 allows attackers to run arbitrary code via crafted modification of server configuration.

Affected configurations

• abinitio authorization gateway (< 4.1.4.9) • abinitio authorization gateway 4.1.5.10 • abinitio authorization gateway 4.1.6.11 • abinitio authorization gateway 4.2.1.6 • abinitio authorization gateway 4.2.2.8 • abinitio authorization gateway 4.2.3.4 • abinitio authorization gateway 4.3.1.0 • abinitio metadata hub (< 4.1.4.9) • abinitio metadata hub 4.1.5.10 • abinitio metadata hub 4.1.6.11 • abinitio metadata hub 4.2.1.6 • abinitio metadata hub 4.2.2.8 • abinitio metadata hub 4.2.3.4 • abinitio metadata hub 4.3.1.0

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References