CVE-2024-32037

Summary

CVE-2024-32037 is a vulnerability affecting GeoNetwork, a spatially referenced resource catalog application. In versions prior to 4.2.10 and 4.4.5, the application's search endpoint unintentionally discloses information about the Elasticsearch software in use through response headers. This information can be valuable to attackers for targeting specific vulnerabilities in the identified software. GeoNetwork has released patches for versions 4.2.10 and 4.4.5 to address this issue, and no known workarounds are available to mitigate the risk before updating.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.