Auth bypass in Thinkst Opencanary
CVE-2024-48911
OpenCanary, a multi-protocol network honeypot, directly executed commands taken from its config file. Prior to version 0.9.4, where the config file is stored in an unprivileged user directory but the daemon is executed by root, it’s possible for the unprivileged user to change the config file and escalate permissions when root later runs the daemon. Version 0.9.4 contains a fix for the issue.
Vulnerability class: Broken Access Control
EPSS: 0.002 (13.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Thinkst Opencanary — versions < 0.9.4
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM, Vendor Advisory)
- security-advisories@github.com (Patch, x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC, Release Notes)
Frequently asked questions
- What is CVE-2024-48911?
- CVE-2024-48911 is a high-severity vulnerability in Thinkst Opencanary, classified under Incorrect Authorization. CVSS score: 7.8/10. Published 2024-10-14.
- How severe is CVE-2024-48911?
- High severity. CVSS v3 base score is 7.8 out of 10.