CVE-2024-9924: Hgiga OAKlouds - Arbitrary File Read And Delete

Published Oct 14, 2024

Updated

The fix for CVE-2024-26261 was incomplete, and and the specific package for OAKlouds from Hgiga remains at risk. Unauthenticated remote attackers still can download arbitrary system files, which may be deleted subsequently .

Affected Software

1 affected component

Hgiga OAKlouds

Remediation

Information

Update OAKlouds-webbase-2.0 to version 1162 or later. Update OAKlouds-webbase-3.0 to version 1162 or later.

Event History

Oct 14, 2024

CVE Published

via MITRE·03:23 AM

Data Sourced

via MITRE·03:23 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·04:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-9924?

The severity of CVE-2024-9924 is significant as it allows unauthenticated remote attackers to potentially access sensitive system files.

How do I fix CVE-2024-9924?

To fix CVE-2024-9924, ensure that you apply the latest security patches from Hgiga for the OAKlouds software.

Who is affected by CVE-2024-9924?

Organizations using Hgiga OAKlouds software are at risk due to the vulnerability detailed in CVE-2024-9924.

What kind of exploitation is possible with CVE-2024-9924?

CVE-2024-9924 allows attackers to download and potentially delete arbitrary system files from vulnerable OAKlouds installations.

Is CVE-2024-9924 a newly discovered vulnerability?

No, CVE-2024-9924 is related to the incomplete fix of an earlier vulnerability, CVE-2024-26261.