CVE-2024-35183
CVSS 3.1 Score 4.4 of 10 (medium)
Details
Summary
CVE-2024-35183 is a vulnerability in the wolfictl command line tool for working with Wolfi. Versions prior to 0.16.10 have a git authentication issue that allows a local user's GitHub token to be sent to remote servers other than `github.com`. This issue is caused by the misuse of authentication in some cases, where the token is passed without checking if the remote git repository is hosted on github.com. The vulnerability poses a potential danger to organizations as it could result in unauthorized access to private repositories and compromise confidentiality. The base severity of this vulnerability is rated as MEDIUM, with a CVSS score of 4.4, and it requires low privileges and user interaction to exploit. To remediate the vulnerability, users should update to version 0.16.10 or later of wolfictl.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions