CVE-2024-41264: Infoleak
Published Aug 1, 2024
·Updated
An issue discovered in casdoor v1.636.0 allows attackers to obtain sensitive information via the ssh.InsecureIgnoreHostKey() method.
Other sources
An issue discovered in casdoor v1.636.0 allows attackers to obtain sensitive information via the ssh.InsecureIgnoreHostKey() method.
— MITRE
Affected Software
2 affected components
go/github.com/casdoor/casdoor>=1.541.0<=1.636.0
Casbin Casdoor=1.636.0
Event History
Aug 1, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Advisory Published
via GitHub·06:32 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-41264?
CVE-2024-41264 is classified as a medium severity vulnerability.
2
How do I fix CVE-2024-41264?
To address CVE-2024-41264, upgrade casdoor to a version higher than 1.636.0.
3
What information can be obtained due to CVE-2024-41264?
CVE-2024-41264 allows attackers to access sensitive information through the ssh.InsecureIgnoreHostKey() method.
4
Which versions of casdoor are affected by CVE-2024-41264?
CVE-2024-41264 affects casdoor versions between 1.541.0 and 1.636.0.
5
Is CVE-2024-41264 a remote or local vulnerability?
CVE-2024-41264 is a remote vulnerability that can be exploited over the network.