CVE-2024-55399
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
A Server-Side Request Forgery (SSRF) vulnerability was discovered in 4C Strategies Exonaut prior to version 21.6.2.1-1. This allows an attacker to send requests from the server to internal network resources.
Risk Assessment
The risk involves potential scanning of internal networks, access to sensitive data or services that should not be externally accessible, potentially leading to attack escalation.
Recommendation
It is recommended to immediately upgrade 4C Strategies Exonaut to version 21.6.2.1-1 or later, which includes a fix for the SSRF vulnerability.
Other vulnerabilities in 4C Strategies Exonaut
See all- CVE-2024-55401Medium
An issue in 4C Strategies Exonaut before version 22.4 allows attackers to perform a directory traversal attack. This vulnerability enables reading files outside the intended directory.
- CVE-2024-55402Medium
An access control issue was discovered in 4C Strategies Exonaut prior to version 22.4, which may allow unauthorized users to access resources without proper permissions.
- CVE-2024-55398Medium
Insecure permissions were discovered in 4C Strategies Exonaut prior to version 22.4, potentially allowing unauthorized access to resources.
Original NVD description (English source)
4C Strategies Exonaut before v21.6.2.1-1 was discovered to contain a Server-Side Request Forgery (SSRF).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS