What is CVE-2024-34477?

CVE-2024-34477 is a high-severity vulnerability in Fogproject, classified under CWE-250. CVSS score: 7.8/10. Published 2024-05-27.

How severe is CVE-2024-34477?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Fogproject

CVE-2024-34477

configureNFS in lib/common/functions.sh in FOG through 1.5.10 allows local users to gain privileges by mounting a crafted NFS share (because of no_root_squash and insecure). In order to exploit the vulnerability, someone needs to mount an NFS share in order to add an executable file as root. In addition, the SUID bit must be added to this file.

EPSS: 0.003 (18.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Fogproject
N/a — versions n/a

Weakness classification (CWE)

CWE-250

References

cve@mitre.org (Product)
cve@mitre.org (Exploit, Vendor Advisory)
cve@mitre.org (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2024-34477?: CVE-2024-34477 is a high-severity vulnerability in Fogproject, classified under CWE-250. CVSS score: 7.8/10. Published 2024-05-27.
How severe is CVE-2024-34477?: High severity. CVSS v3 base score is 7.8 out of 10.