CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-39916

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. There is a security issue with the NFS configuration in /etc/exports generated by the installer that allows an attacker to modify files outside the export in the default installation. The exports have the no_subtree_check option. The no_subtree_check option means that if a client performs a file operation, the server will only check if the requested file is on the correct filesystem, not if it is in the correct directory. This enables modifying files in /images, accessing other files on the same filesystem, and accessing files on other filesystems. This vulnerability is fixed in 1.5.10.30.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 34.8%

CVSS Severity

CVSS v3 Score 6.4

References

Products affected by CVE-2024-39916

Fogproject » Fogproject » Version: N/A

cpe:2.3:a:fogproject:fogproject:-
Fogproject » Fogproject » Version: 1.3.0

cpe:2.3:a:fogproject:fogproject:1.3.0
Fogproject » Fogproject » Version: 1.3.1

cpe:2.3:a:fogproject:fogproject:1.3.1
Fogproject » Fogproject » Version: 1.3.2

cpe:2.3:a:fogproject:fogproject:1.3.2
Fogproject » Fogproject » Version: 1.3.3

cpe:2.3:a:fogproject:fogproject:1.3.3
Fogproject » Fogproject » Version: 1.3.4

cpe:2.3:a:fogproject:fogproject:1.3.4
Fogproject » Fogproject » Version: 1.3.5

cpe:2.3:a:fogproject:fogproject:1.3.5
Fogproject » Fogproject » Version: 1.4.0

cpe:2.3:a:fogproject:fogproject:1.4.0
Fogproject » Fogproject » Version: 1.4.1

cpe:2.3:a:fogproject:fogproject:1.4.1
Fogproject » Fogproject » Version: 1.4.2

cpe:2.3:a:fogproject:fogproject:1.4.2
Fogproject » Fogproject » Version: 1.4.3

cpe:2.3:a:fogproject:fogproject:1.4.3
Fogproject » Fogproject » Version: 1.4.4

cpe:2.3:a:fogproject:fogproject:1.4.4
Fogproject » Fogproject » Version: 1.5.0

cpe:2.3:a:fogproject:fogproject:1.5.0
Fogproject » Fogproject » Version: 1.5.1

cpe:2.3:a:fogproject:fogproject:1.5.1
Fogproject » Fogproject » Version: 1.5.10

cpe:2.3:a:fogproject:fogproject:1.5.10
Fogproject » Fogproject » Version: 1.5.2

cpe:2.3:a:fogproject:fogproject:1.5.2
Fogproject » Fogproject » Version: 1.5.3

cpe:2.3:a:fogproject:fogproject:1.5.3
Fogproject » Fogproject » Version: 1.5.4

cpe:2.3:a:fogproject:fogproject:1.5.4
Fogproject » Fogproject » Version: 1.5.5

cpe:2.3:a:fogproject:fogproject:1.5.5
Fogproject » Fogproject » Version: 1.5.6

cpe:2.3:a:fogproject:fogproject:1.5.6
Fogproject » Fogproject » Version: 1.5.7

cpe:2.3:a:fogproject:fogproject:1.5.7
Fogproject » Fogproject » Version: 1.5.8

cpe:2.3:a:fogproject:fogproject:1.5.8
Fogproject » Fogproject » Version: 1.5.9

cpe:2.3:a:fogproject:fogproject:1.5.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-39916

Products

Pricing

Contact Us