CVE-2024-6174

Опубликовано: 26 июн. 2025

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration.

Ссылки

https://github.com/canonical/cloud-init/releases/tag/25.1.3

EPSS

Процентиль: 4%

0.00022

Низкий

8.8 High

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVE-2024-6174

CVSS3: 8.8

ubuntu

около 2 месяцев назад

When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration.

CVE-2024-6174

CVSS3: 8.8

redhat

около 2 месяцев назад

When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration.

CVE-2024-6174

CVSS3: 8.8

msrc

около 1 месяца назад

Описание отсутствует

CVE-2024-6174

CVSS3: 8.8

debian

около 2 месяцев назад

When a non-x86 platform is detected, cloud-init grants root access to ...

GHSA-w8g9-wp36-fchj

CVSS3: 8.8

github

около 2 месяцев назад

When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration.

EPSS

Процентиль: 4%

0.00022

Низкий

8.8 High

CVSS3

Дефекты

CWE-287