CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-7634

NGINX Agent's "config_dirs" restriction feature allows a highly privileged attacker to gain the ability to write/overwrite files outside of the designated secure directory.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 41.5%

CVSS Severity

CVSS v3 Score 4.9

References

https://my.f5.com/manage/s/article/K000140630

Products affected by CVE-2024-7634

F5 » Nginx Agent » Version: 2.17.0

cpe:2.3:a:f5:nginx_agent:2.17.0
F5 » Nginx Agent » Version: 2.18.0

cpe:2.3:a:f5:nginx_agent:2.18.0
F5 » Nginx Agent » Version: 2.19.0

cpe:2.3:a:f5:nginx_agent:2.19.0
F5 » Nginx Agent » Version: 2.20.0

cpe:2.3:a:f5:nginx_agent:2.20.0
F5 » Nginx Agent » Version: 2.20.1

cpe:2.3:a:f5:nginx_agent:2.20.1
F5 » Nginx Agent » Version: 2.21.0

cpe:2.3:a:f5:nginx_agent:2.21.0
F5 » Nginx Agent » Version: 2.22.0

cpe:2.3:a:f5:nginx_agent:2.22.0
F5 » Nginx Agent » Version: 2.22.1

cpe:2.3:a:f5:nginx_agent:2.22.1
F5 » Nginx Agent » Version: 2.23.0

cpe:2.3:a:f5:nginx_agent:2.23.0
F5 » Nginx Agent » Version: 2.23.1

cpe:2.3:a:f5:nginx_agent:2.23.1
F5 » Nginx Agent » Version: 2.23.2

cpe:2.3:a:f5:nginx_agent:2.23.2
F5 » Nginx Agent » Version: 2.23.3

cpe:2.3:a:f5:nginx_agent:2.23.3
F5 » Nginx Agent » Version: 2.24.0

cpe:2.3:a:f5:nginx_agent:2.24.0
F5 » Nginx Agent » Version: 2.24.1

cpe:2.3:a:f5:nginx_agent:2.24.1
F5 » Nginx Agent » Version: 2.25.0

cpe:2.3:a:f5:nginx_agent:2.25.0
F5 » Nginx Agent » Version: 2.25.1

cpe:2.3:a:f5:nginx_agent:2.25.1
F5 » Nginx Agent » Version: 2.26.0

cpe:2.3:a:f5:nginx_agent:2.26.0
F5 » Nginx Agent » Version: 2.26.1

cpe:2.3:a:f5:nginx_agent:2.26.1
F5 » Nginx Agent » Version: 2.26.2

cpe:2.3:a:f5:nginx_agent:2.26.2
F5 » Nginx Agent » Version: 2.27.0

cpe:2.3:a:f5:nginx_agent:2.27.0
F5 » Nginx Agent » Version: 2.27.1

cpe:2.3:a:f5:nginx_agent:2.27.1
F5 » Nginx Agent » Version: 2.28.0

cpe:2.3:a:f5:nginx_agent:2.28.0
F5 » Nginx Agent » Version: 2.28.1

cpe:2.3:a:f5:nginx_agent:2.28.1
F5 » Nginx Agent » Version: 2.29.0

cpe:2.3:a:f5:nginx_agent:2.29.0
F5 » Nginx Agent » Version: 2.30.0

cpe:2.3:a:f5:nginx_agent:2.30.0
F5 » Nginx Agent » Version: 2.30.1

cpe:2.3:a:f5:nginx_agent:2.30.1
F5 » Nginx Agent » Version: 2.30.2

cpe:2.3:a:f5:nginx_agent:2.30.2
F5 » Nginx Agent » Version: 2.30.3

cpe:2.3:a:f5:nginx_agent:2.30.3
F5 » Nginx Agent » Version: 2.31.0

cpe:2.3:a:f5:nginx_agent:2.31.0
F5 » Nginx Agent » Version: 2.31.1

cpe:2.3:a:f5:nginx_agent:2.31.1
F5 » Nginx Agent » Version: 2.31.2

cpe:2.3:a:f5:nginx_agent:2.31.2
F5 » Nginx Agent » Version: 2.32.0

cpe:2.3:a:f5:nginx_agent:2.32.0
F5 » Nginx Agent » Version: 2.32.1

cpe:2.3:a:f5:nginx_agent:2.32.1
F5 » Nginx Agent » Version: 2.32.2

cpe:2.3:a:f5:nginx_agent:2.32.2
F5 » Nginx Agent » Version: 2.33.0

cpe:2.3:a:f5:nginx_agent:2.33.0
F5 » Nginx Agent » Version: 2.34.0

cpe:2.3:a:f5:nginx_agent:2.34.0
F5 » Nginx Agent » Version: 2.34.1

cpe:2.3:a:f5:nginx_agent:2.34.1
F5 » Nginx Agent » Version: 2.35.0

cpe:2.3:a:f5:nginx_agent:2.35.0
F5 » Nginx Agent » Version: 2.35.1

cpe:2.3:a:f5:nginx_agent:2.35.1
F5 » Nginx Agent » Version: 2.36.0

cpe:2.3:a:f5:nginx_agent:2.36.0
F5 » Nginx Agent » Version: 2.36.1

cpe:2.3:a:f5:nginx_agent:2.36.1
F5 » Nginx Instance Manager » Version: 2.10.0

cpe:2.3:a:f5:nginx_instance_manager:2.10.0
F5 » Nginx Instance Manager » Version: 2.10.1

cpe:2.3:a:f5:nginx_instance_manager:2.10.1
F5 » Nginx Instance Manager » Version: 2.11.0

cpe:2.3:a:f5:nginx_instance_manager:2.11.0
F5 » Nginx Instance Manager » Version: 2.12.0

cpe:2.3:a:f5:nginx_instance_manager:2.12.0
F5 » Nginx Instance Manager » Version: 2.13.0

cpe:2.3:a:f5:nginx_instance_manager:2.13.0
F5 » Nginx Instance Manager » Version: 2.13.1

cpe:2.3:a:f5:nginx_instance_manager:2.13.1
F5 » Nginx Instance Manager » Version: 2.14.0

cpe:2.3:a:f5:nginx_instance_manager:2.14.0
F5 » Nginx Instance Manager » Version: 2.14.1

cpe:2.3:a:f5:nginx_instance_manager:2.14.1
F5 » Nginx Instance Manager » Version: 2.15.0

cpe:2.3:a:f5:nginx_instance_manager:2.15.0
F5 » Nginx Instance Manager » Version: 2.15.1

cpe:2.3:a:f5:nginx_instance_manager:2.15.1
F5 » Nginx Instance Manager » Version: 2.16.0

cpe:2.3:a:f5:nginx_instance_manager:2.16.0
F5 » Nginx Instance Manager » Version: 2.17.0

cpe:2.3:a:f5:nginx_instance_manager:2.17.0
F5 » Nginx Instance Manager » Version: 2.17.1

cpe:2.3:a:f5:nginx_instance_manager:2.17.1
F5 » Nginx Instance Manager » Version: 2.3.1

cpe:2.3:a:f5:nginx_instance_manager:2.3.1
F5 » Nginx Instance Manager » Version: 2.4.0

cpe:2.3:a:f5:nginx_instance_manager:2.4.0
F5 » Nginx Instance Manager » Version: 2.5.0

cpe:2.3:a:f5:nginx_instance_manager:2.5.0
F5 » Nginx Instance Manager » Version: 2.5.1

cpe:2.3:a:f5:nginx_instance_manager:2.5.1
F5 » Nginx Instance Manager » Version: 2.6.0

cpe:2.3:a:f5:nginx_instance_manager:2.6.0
F5 » Nginx Instance Manager » Version: 2.7.0

cpe:2.3:a:f5:nginx_instance_manager:2.7.0
F5 » Nginx Instance Manager » Version: 2.8.0

cpe:2.3:a:f5:nginx_instance_manager:2.8.0
F5 » Nginx Instance Manager » Version: 2.9.0

cpe:2.3:a:f5:nginx_instance_manager:2.9.0
F5 » Nginx Instance Manager » Version: 2.9.1

cpe:2.3:a:f5:nginx_instance_manager:2.9.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-7634

Products

Pricing

Contact Us