Vulnerability Description
OpenCanary, a multi-protocol network honeypot, directly executed commands taken from its config file. Prior to version 0.9.4, where the config file is stored in an unprivileged user directory but the daemon is executed by root, it’s possible for the unprivileged user to change the config file and escalate permissions when root later runs the daemon. Version 0.9.4 contains a fix for the issue.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Thinkst | Opencanary | < 0.9.4 |
Related Weaknesses (CWE)
References
- https://github.com/thinkst/opencanary/commit/2c11575b1a3dd8b0df26a879ba856c0aa35Patch
- https://github.com/thinkst/opencanary/releases/tag/v0.9.4Release Notes
- https://github.com/thinkst/opencanary/security/advisories/GHSA-pf5v-pqfv-x8jjVendor Advisory
FAQ
What is CVE-2024-48911?
CVE-2024-48911 is a vulnerability with a CVSS score of 7.8 (HIGH). OpenCanary, a multi-protocol network honeypot, directly executed commands taken from its config file. Prior to version 0.9.4, where the config file is stored in an unprivileged user directory but the ...
How severe is CVE-2024-48911?
CVE-2024-48911 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-48911?
Check the references section above for vendor advisories and patch information. Affected products include: Thinkst Opencanary.