CVE-2024-4871

CVSS 3.1 Score 6.8 of 10 (medium)

Details

Published May 14, 2024
CWE ID 322

Summary

CVE-2024-4871 is a vulnerability found in Satellite, affecting the "SjBqbS" product. The flaw allows an attacker to perform a man-in-the-middle attack (MITM) or denial of service by exploiting the host's SSH key not being checked when running a remote execution job. This vulnerability can also result in the leaking of secrets contained within the remote execution job. Although unauthorized remote execution on the Satellite is not directly allowed, the leaked secrets may lead to it. The risk score for this vulnerability is 25, with a base severity rating of MEDIUM. It has an exploitability score of 1.6 and affects confidentiality and integrity with a high impact. Remediation measures should include ensuring proper SSH key checking and updating affected systems promptly to mitigate potential risks to organizations.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-4871 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options