CVE-2024-11481: Path Traversal
A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API. This leads to improper handling of path traversal, insecure forwarding to an AJP backend without adequate validation, and lack of authentication for accessing internal API endpoints.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-11481?
CVE-2024-11481 is classified as a high severity vulnerability due to its potential for unauthorized access and exploitation.
How do I fix CVE-2024-11481?
To fix CVE-2024-11481, update to the latest version of ESM that addresses this vulnerability and ensure proper API authentication mechanisms are in place.
What causes CVE-2024-11481?
CVE-2024-11481 is caused by inadequate authentication measures and improper handling of requests to the internal Snowservice API.
Who is affected by CVE-2024-11481?
Organizations using ESM version 11.6.10 are affected by CVE-2024-11481 due to the vulnerabilities associated with unauthorized API access.
Can CVE-2024-11481 lead to data breaches?
Yes, CVE-2024-11481 can lead to data breaches as it allows unauthenticated access to sensitive internal API endpoints.