CVE-2024-35183

CVSS 3.1 Score 4.4 of 10 (medium)

Details

Published May 15, 2024
Updated: May 16, 2024
CWE ID 552
CWE ID 668

Summary

CVE-2024-35183 is a vulnerability in the wolfictl command line tool for working with Wolfi. Versions prior to 0.16.10 have a git authentication issue that allows a local user's GitHub token to be sent to remote servers other than `github.com`. This issue is caused by the misuse of authentication in some cases, where the token is passed without checking if the remote git repository is hosted on github.com. The vulnerability poses a potential danger to organizations as it could result in unauthorized access to private repositories and compromise confidentiality. The base severity of this vulnerability is rated as MEDIUM, with a CVSS score of 4.4, and it requires low privileges and user interaction to exploit. To remediate the vulnerability, users should update to version 0.16.10 or later of wolfictl.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-35183 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options