CVE-2024-41708: High severity adacore ada web services vulnerability
An issue was discovered in AdaCore adawebservices 20.0 allows an attacker to escalate privileges and steal sessions via the RandomString() function in the src/core/aws-utils.adb module.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41708?
CVE-2024-41708 is classified as a high severity vulnerability due to its potential for privilege escalation and session theft.
How do I fix CVE-2024-41708?
To fix CVE-2024-41708, upgrade to the latest version of AdaCore ada_web_services where the vulnerability is addressed.
What is the main issue with CVE-2024-41708?
The main issue with CVE-2024-41708 lies in the Random_String() function in the src/core/aws-utils.adb module, which can be exploited to escalate privileges.
Which version of AdaCore ada_web_services is affected by CVE-2024-41708?
CVE-2024-41708 affects version 20.0 of AdaCore ada_web_services.
Can CVE-2024-41708 lead to unauthorized access?
Yes, CVE-2024-41708 can potentially allow an attacker to escalate privileges and steal sessions, leading to unauthorized access.