CVE-2024-1367

Summary

CVE-2024-1367 is a command injection vulnerability affecting the Security Center application. An authenticated attacker with administrator privileges can manipulate Logging parameters, allowing them to inject and execute arbitrary code on the Security Center host. This vulnerability poses a significant risk, as it can be exploited remotely and could result in serious security consequences. Successful exploitation could lead to unauthorized access, data theft, or system damage. It is recommended that affected organizations apply the necessary patches or mitigations promptly to protect against potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.