CVE Catalog
CVE-2024-22047
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk0.49%
39th percentile - higher than 39% of all known CVEs
Summary
A race condition in Audited versions 4.0.0 through 5.3.3 can allow an authenticated user to cause audit log entries to be attributed to another user.
Risk Assessment
The risk involves potential tampering of audit logs, which can hinder detection of unauthorized actions and compromise the integrity of event tracking in the system.
Recommendation
It is recommended to update the Audited library to version 5.3.4 or later, which includes a fix for the race condition.
Original NVD description (English source)
A race condition exists in Audited 4.0.0 to 5.3.3 that can result in an authenticated user to cause audit log entries to be attributed to another user.