CVE-2024-41151

Summary

Deserialization of Untrusted Data vulnerability in Apache HertzBeat.

This vulnerability can only be exploited by authorized attackers.

This issue affects Apache HertzBeat: before 1.6.1.

Users are recommended to upgrade to version 1.6.1, which fixes the issue.

Affected Software

Weaknesses

• CWE-502: CWE-502 Deserialization of Untrusted Data

ADP Enrichment

CVE Program Container

Additional References

• http://www.openwall.com/lists/oss-security/2024/11/16/6

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://lists.apache.org/thread/p33tg0vo5nh6kscth4262ktsqo3h5lqo
• https://lists.apache.org/thread/oor9nw6nh2ojnfw8d8oxrv40cbtk5mwj

• ←Previous
• Next→