CVE-2024-55401
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
An issue in 4C Strategies Exonaut before version 22.4 allows attackers to perform a directory traversal attack. This vulnerability enables reading files outside the intended directory.
Risk Assessment
An attacker could access sensitive configuration files or data stored on the server, potentially leading to information disclosure and compromising organizational security.
Recommendation
Immediately update 4C Strategies Exonaut to version 22.4 or later, which includes a fix for this vulnerability.
Other vulnerabilities in 4C Strategies Exonaut
See all- CVE-2024-55402Medium
An access control issue was discovered in 4C Strategies Exonaut prior to version 22.4, which may allow unauthorized users to access resources without proper permissions.
- CVE-2024-55399Medium
A Server-Side Request Forgery (SSRF) vulnerability was discovered in 4C Strategies Exonaut prior to version 21.6.2.1-1. This allows an attacker to send requests from the server to internal network resources.
- CVE-2024-55398Medium
Insecure permissions were discovered in 4C Strategies Exonaut prior to version 22.4, potentially allowing unauthorized access to resources.
Original NVD description (English source)
An issue in 4C Strategies Exonaut before v22.4 allows attackers to execute a directory traversal.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS