CVE-2024-41922

A directory traversal vulnerability exists in the log files download functionality of Veertu Anka Build 1.42.0. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

cpe:2.3:a:veertu:anka_build_cloud:1.42.0:*:*:*:*:*:*:*

History

18 Dec 2024, 15:15

Type Values Removed Values Added
Summary A directory traversal vulnerability exists in the log files download functionality of Veertu Anka Build 1.42.0. A specially crafted HTTP request can result in a disclosure of arbitrary files. An attacker can make an unauthenticated HTTP request to trigger this vulnerability. A directory traversal vulnerability exists in the log files download functionality of Veertu Anka Build 1.42.0. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
CWE CWE-22
References
  • () https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2061 -
CVSS v2 : unknown
v3 : 7.5
v2 : unknown
v3 : unknown

08 Oct 2024, 14:48

Type Values Removed Values Added
References () https://talosintelligence.com/vulnerability_reports/TALOS-2024-2061 - () https://talosintelligence.com/vulnerability_reports/TALOS-2024-2061 - Exploit, Third Party Advisory
CPE cpe:2.3:a:veertu:anka_build_cloud:1.42.0:*:*:*:*:*:*:*
First Time Veertu
Veertu anka Build Cloud

03 Oct 2024, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-10-03 16:15

Updated : 2024-12-18 15:15


NVD link : CVE-2024-41922

Mitre link : CVE-2024-41922


JSON object : View

Products Affected

veertu

  • anka_build_cloud
CWE

No CWE.