CVE-2024-6122: Incorrect Default Directory Permissions for NI SystemLink Redis Service
An incorrect permission in the installation directory for the shared NI SystemLink Server KeyValueDatabase service may result in information disclosure via local access. This affects NI SystemLink Server 2024 Q1 and prior versions. It also affects NI FlexLogger 2023 Q2 and prior versions which installed this shared service.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6122?
The severity of CVE-2024-6122 is considered critical due to the potential for information disclosure.
How do I fix CVE-2024-6122?
To fix CVE-2024-6122, adjust the permissions of the installation directory for the NI SystemLink Server KeyValueDatabase service.
Which software versions are affected by CVE-2024-6122?
CVE-2024-6122 affects NI SystemLink Server 2024 Q1 and prior versions, as well as NI FlexLogger 2023 Q2 and prior versions.
Can CVE-2024-6122 be exploited remotely?
CVE-2024-6122 requires local access to be exploited, as it involves incorrect permissions in the installation directory.
What is the impact of CVE-2024-6122 on users?
The impact of CVE-2024-6122 is information disclosure, which could expose sensitive data to unauthorized local users.