{ "schemaVersion": "1.0", "publisher": "脆弱性ナビ", "origin": "https://zeijaku.ittrip.xyz", "terms": [ { "name": "CVE Program", "url": "https://www.cve.org/legal/termsofuse", "notice": "CVE content is used subject to the CVE Program Terms of Use. CVE is a trademark of The MITRE Corporation.", "licenseText": "CVE content: Copyright The MITRE Corporation. CVE is a trademark of The MITRE Corporation.\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nDisclaimers: ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE." }, { "name": "NIST NVD", "url": "https://nvd.nist.gov/general/faq", "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD." }, { "name": "JVN", "url": "https://jvn.jp/contact/index.html", "notice": "出典：JVN（JPCERT/CC・IPA）。原文は各レコードの参照先を確認してください。" }, { "name": "CISA KEV", "url": "https://github.com/cisagov/kev-data", "notice": "Known Exploited Vulnerabilities catalog, CISA. CC0." } ], "records": [ { "id": "CVE-2024-32113", "aliases": [], "title": "Apache OFBiz：コード実行", "summary": "Apache OFBiz において、パス名の制限が不適切で、攻撃者がディレクトリ外のファイルにアクセスできるパストラバーサルの脆弱性があり、リモートからコードを実行させられる可能性があります。この問題は Apache OFBiz のバージョン 18.12.13 未満に影響します。ユーザーはこの問題を修正した 18.12.13 へアップグレードすることが推奨されています。", "risk": "攻撃者がこの脆弱性を利用すると、サーバー上で攻撃者のコードを実行させられる可能性があります。", "product": "Apache OFBiz", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "apache", "cvssVector": null, "affected": [ { "product": "Apache OFBiz", "range": "< 18.12.13" } ], "fixed": [], "steps": [ "Apache OFBiz をバージョン 18.12.13 にアップグレードしてください。", "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "「CVE-2024-32113」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/32xxx/CVE-2024-32113.json", "label": "CVE：apache" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-32113", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-32113", "label": "CVE公式レコード" }, { "url": "https://ofbiz.apache.org/download.html", "label": "CVE掲載の参考情報" }, { "url": "https://ofbiz.apache.org/security.html", "label": "CVE掲載の参考情報" }, { "url": "https://issues.apache.org/jira/browse/OFBIZ-13006", "label": "CVE掲載の参考情報" }, { "url": "https://lists.apache.org/thread/w6s60okgkxp2th1sr8vx0ndmgk68fqrd", "label": "CISAが示す関連情報" }, { "url": "http://www.openwall.com/lists/oss-security/2024/05/09/1", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-32113", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-05-08T14:50:07.272Z", "modifiedAt": "2025-10-21T23:05:18.831Z", "fetchedAt": "2026-10-24T05:12:59.714Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13.\n\nUsers are recommended to upgrade to version 18.12.13, which fixes the issue.", "sourceTitle": "Apache OFBiz: Path traversal leading to RCE", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "product": "Apache OFBiz", "vendor": "Apache Software Foundation", "versions": [ { "lessThan": "18.12.13", "status": "affected", "version": "0", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-32113", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/32xxx/CVE-2024-32113.json", "fetchedAt": "2026-10-24T05:12:59.714Z", "publishedAt": "2024-05-08T14:50:07.272Z", "modifiedAt": "2025-10-21T23:05:18.831Z", "state": "published", "provider": "apache", "title": "Apache OFBiz: Path traversal leading to RCE", "descriptions": [ { "lang": "en", "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13.\n\nUsers are recommended to upgrade to version 18.12.13, which fixes the issue.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Apache OFBiz contains a path traversal vulnerability that could allow for remote code execution.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-32113", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Apache Software Foundation", "product": "Apache OFBiz", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "18.12.13", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-22", "lang": "en", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 9.1, "baseSeverity": "CRITICAL", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://ofbiz.apache.org/download.html", "label": "CVE", "tags": [ "mitigation", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://ofbiz.apache.org/security.html", "label": "CVE", "tags": [ "related", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://issues.apache.org/jira/browse/OFBIZ-13006", "label": "CVE", "tags": [ "issue-tracking", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" }, { "url": "https://lists.apache.org/thread/w6s60okgkxp2th1sr8vx0ndmgk68fqrd", "label": "CVE", "tags": [ "vendor-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/3" }, { "url": "http://www.openwall.com/lists/oss-security/2024/05/09/1", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/4" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-32113", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/32xxx/CVE-2024-32113.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"Apache OFBiz\",\"vendor\":\"Apache Software Foundation\",\"versions\":[{\"lessThan\":\"18.12.13\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/32xxx/CVE-2024-32113.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13.\n\nUsers are recommended to upgrade to version 18.12.13, which fixes the issue.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/32xxx/CVE-2024-32113.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-22\",\"description\":\"CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/32xxx/CVE-2024-32113.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":9.1,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"NONE\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-32113:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-32113", "sourcePath": "retained:/originalText", "text": "Apache OFBiz contains a path traversal vulnerability that could allow for remote code execution.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-32113:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-32113", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-32113", "modifiedAt": "2024-08-07T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:18.831Z", "fetchedAt": "2026-10-24T05:12:59.714Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-08-07T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Apache OFBizにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:12:59.714Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "9b4048d0b6eca637dc0f215ac4d7e29e1f355a296f452b8db494a54d155d8bea", "sourceModifiedAt": "2025-10-21T23:05:18.831Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Apache OFBiz において、パス名の制限が不適切で、攻撃者がディレクトリ外のファイルにアクセスできるパストラバーサルの脆弱性があり、リモートからコードを実行させられる可能性があります。この問題は Apache OFBiz のバージョン 18.12.13 未満に影響します。ユーザーはこの問題を修正した 18.12.13 へアップグレードすることが推奨されています。", "risk": "攻撃者がこの脆弱性を利用すると、サーバー上で攻撃者のコードを実行させられる可能性があります。", "summaryEvidenceIds": [ "E1", "E2", "E3" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "公式の対象表：Apache Software Foundation / Apache OFBiz。影響ありとして記載：18.12.13未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/32xxx/CVE-2024-32113.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-32113" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/32xxx/CVE-2024-32113.json" ], "evidenceIds": [ "E4" ] }, { "text": "「Apache OFBiz」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-32113", "https://ofbiz.apache.org/download.html", "https://ofbiz.apache.org/security.html", "https://issues.apache.org/jira/browse/OFBIZ-13006", "https://lists.apache.org/thread/w6s60okgkxp2th1sr8vx0ndmgk68fqrd", "http://www.openwall.com/lists/oss-security/2024/05/09/1", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-32113", "https://nvd.nist.gov/vuln/detail/CVE-2024-32113" ] } ], "actions": [ { "text": "Apache OFBiz をバージョン 18.12.13 にアップグレードしてください。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/32xxx/CVE-2024-32113.json" ], "evidenceIds": [ "E1" ] }, { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-32113" ], "evidenceIds": [ "E5" ] }, { "text": "「CVE-2024-32113」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-32113", "https://ofbiz.apache.org/download.html", "https://ofbiz.apache.org/security.html", "https://issues.apache.org/jira/browse/OFBIZ-13006", "https://lists.apache.org/thread/w6s60okgkxp2th1sr8vx0ndmgk68fqrd", "http://www.openwall.com/lists/oss-security/2024/05/09/1", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-32113", "https://nvd.nist.gov/vuln/detail/CVE-2024-32113" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-32113", "https://ofbiz.apache.org/download.html", "https://ofbiz.apache.org/security.html", "https://issues.apache.org/jira/browse/OFBIZ-13006", "https://lists.apache.org/thread/w6s60okgkxp2th1sr8vx0ndmgk68fqrd", "http://www.openwall.com/lists/oss-security/2024/05/09/1", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-32113", "https://nvd.nist.gov/vuln/detail/CVE-2024-32113" ] } ], "temporaryMitigations": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-32113" ], "evidenceIds": [ "E5" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/32xxx/CVE-2024-32113.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-32113", "https://ofbiz.apache.org/download.html", "https://ofbiz.apache.org/security.html", "https://issues.apache.org/jira/browse/OFBIZ-13006", "https://lists.apache.org/thread/w6s60okgkxp2th1sr8vx0ndmgk68fqrd", "http://www.openwall.com/lists/oss-security/2024/05/09/1", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-32113", "https://nvd.nist.gov/vuln/detail/CVE-2024-32113" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/32xxx/CVE-2024-32113.json", "label": "CVE：apache" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-32113", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-32113", "label": "CVE公式レコード" }, { "url": "https://ofbiz.apache.org/download.html", "label": "CVE掲載の参考情報" }, { "url": "https://ofbiz.apache.org/security.html", "label": "CVE掲載の参考情報" }, { "url": "https://issues.apache.org/jira/browse/OFBIZ-13006", "label": "CVE掲載の参考情報" }, { "url": "https://lists.apache.org/thread/w6s60okgkxp2th1sr8vx0ndmgk68fqrd", "label": "CISAが示す関連情報" }, { "url": "http://www.openwall.com/lists/oss-security/2024/05/09/1", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-32113", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/32xxx/CVE-2024-32113.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13.\n\nUsers are recommended to upgrade to version 18.12.13, which fixes the issue.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-32113", "sourceField": "retained:/originalText", "excerpt": "Apache OFBiz contains a path traversal vulnerability that could allow for remote code execution.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/32xxx/CVE-2024-32113.json", "sourceField": "/containers/cna/title", "excerpt": "Apache OFBiz: Path traversal leading to RCE", "language": null }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/32xxx/CVE-2024-32113.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"Apache OFBiz\",\"vendor\":\"Apache Software Foundation\",\"versions\":[{\"lessThan\":\"18.12.13\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-32113", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-32113", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-32113\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-32113（Apache OFBiz）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：Apache Software Foundation / Apache OFBiz。影響ありとして記載：18.12.13未満の版。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-32113", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:12:59.714Z", "lastSuccess": "2026-10-24T05:12:59.714Z", "sourceCheckedAt": "2026-10-24T05:12:59.714Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-36971", "aliases": [], "title": "Linux：脆弱性情報", "summary": "Linux カーネルにおいて、__dst_negative_advice() が sk->dst_cache をクリアする際に正しい RCU ルールを守らず、先に sk->sk_dst_cache をクリアせずに dst_release(old_dst) を呼んでしまうため、使用後解放 (UAF) が発生する可能性があります。sk_dst_reset() は正しい手順を実装していますが、__dst_negative_advice() は順序が間違っています。ip6_negative_advice() の特別なロジックにより、3 つの ->negative_advice() メソッドすべてが自分で sk_dst_reset() を実行しなければなりません。このバグは UDP ソケットを使用したときに顕在化しました。", "risk": "使用後解放 (UAF) が発生する可能性がある。", "product": "Linux", "category": "other", "component": "package", "severity": "high", "cvss": 7.8, "cvssVersion": "3.1", "cvssSource": "Linux", "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "Linux", "range": ">= a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314 / < 051c0bde9f0450a2ec3d62a86d2a0d2fad117f13" }, { "product": "Linux", "range": ">= a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314 / < db0082825037794c5dba9959c9de13ca34cc5e72" }, { "product": "Linux", "range": ">= a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314 / < 2295a7ef5c8c49241bff769e7826ef2582e532a6" }, { "product": "Linux", "range": ">= a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314 / < eacb8b195579c174a6d3e12a9690b206eb7f28cf" }, { "product": "Linux", "range": ">= a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314 / < 81dd3c82a456b0015461754be7cb2693991421b4" }, { "product": "Linux", "range": ">= a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314 / < 5af198c387128a9d2ddd620b0f0803564a4d4508" }, { "product": "Linux", "range": ">= a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314 / < b8af8e6118a6605f0e495a58d591ca94a85a50fc" }, { "product": "Linux", "range": ">= a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314 / < 92f1655aa2b2294d0b49925f3b875a634bd3b59e" }, { "product": "Linux", "range": "4.6" }, { "product": "Linux", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36971.json", "label": "CVE：Linux" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-36971", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-36971", "label": "CVE公式レコード" }, { "url": "https://git.kernel.org/stable/c/051c0bde9f0450a2ec3d62a86d2a0d2fad117f13", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/db0082825037794c5dba9959c9de13ca34cc5e72", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/2295a7ef5c8c49241bff769e7826ef2582e532a6", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/eacb8b195579c174a6d3e12a9690b206eb7f28cf", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/81dd3c82a456b0015461754be7cb2693991421b4", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/5af198c387128a9d2ddd620b0f0803564a4d4508", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/b8af8e6118a6605f0e495a58d591ca94a85a50fc", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/92f1655aa2b2294d0b49925f3b875a634bd3b59e", "label": "CVE掲載の参考情報" }, { "url": "https://source.android.com/docs/security/bulletin/2024-08-01", "label": "CISAが示す関連情報" }, { "url": "https://lore.kernel.org/linux-cve-announce/20240610090330.1347021-2-lee@kernel.org/T/#u", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-36971", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-06-10T09:03:23.878Z", "modifiedAt": "2026-08-05T11:32:22.196Z", "fetchedAt": "2026-10-24T05:13:04.080Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix __dst_negative_advice() race\n\n__dst_negative_advice() does not enforce proper RCU rules when\nsk->dst_cache must be cleared, leading to possible UAF.\n\nRCU rules are that we must first clear sk->sk_dst_cache,\nthen call dst_release(old_dst).\n\nNote that sk_dst_reset(sk) is implementing this protocol correctly,\nwhile __dst_negative_advice() uses the wrong order.\n\nGiven that ip6_negative_advice() has special logic\nagainst RTF_CACHE, this means each of the three ->negative_advice()\nexisting methods must perform the sk_dst_reset() themselves.\n\nNote the check against NULL dst is centralized in\n__dst_negative_advice(), there is no need to duplicate\nit in various callbacks.\n\nMany thanks to Clement Lecigne for tracking this issue.\n\nThis old bug became visible after the blamed commit, using UDP sockets.", "sourceTitle": "net: fix __dst_negative_advice() race", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": [ "include/net/dst_ops.h", "include/net/sock.h", "net/ipv4/route.c", "net/ipv6/route.c", "net/xfrm/xfrm_policy.c" ], "versions": [ { "version": "a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314", "lessThan": "051c0bde9f0450a2ec3d62a86d2a0d2fad117f13", "status": "affected", "versionType": "git" }, { "version": "a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314", "lessThan": "db0082825037794c5dba9959c9de13ca34cc5e72", "status": "affected", "versionType": "git" }, { "version": "a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314", "lessThan": "2295a7ef5c8c49241bff769e7826ef2582e532a6", "status": "affected", "versionType": "git" }, { "version": "a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314", "lessThan": "eacb8b195579c174a6d3e12a9690b206eb7f28cf", "status": "affected", "versionType": "git" }, { "version": "a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314", "lessThan": "81dd3c82a456b0015461754be7cb2693991421b4", "status": "affected", "versionType": "git" }, { "version": "a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314", "lessThan": "5af198c387128a9d2ddd620b0f0803564a4d4508", "status": "affected", "versionType": "git" }, { "version": "a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314", "lessThan": "b8af8e6118a6605f0e495a58d591ca94a85a50fc", "status": "affected", "versionType": "git" }, { "version": "a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314", "lessThan": "92f1655aa2b2294d0b49925f3b875a634bd3b59e", "status": "affected", "versionType": "git" } ] }, { "product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": [ "include/net/dst_ops.h", "include/net/sock.h", "net/ipv4/route.c", "net/ipv6/route.c", "net/xfrm/xfrm_policy.c" ], "versions": [ { "version": "4.6", "status": "affected" }, { "version": "0", "lessThan": "4.6", "status": "unaffected", "versionType": "semver" }, { "version": "4.19.316", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "semver" }, { "version": "5.4.278", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver" }, { "version": "5.10.219", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver" }, { "version": "5.15.161", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.1.94", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.6.34", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.9.4", "lessThanOrEqual": "6.9.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.10", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-36971", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36971.json", "fetchedAt": "2026-10-24T05:13:04.080Z", "publishedAt": "2024-06-10T09:03:23.878Z", "modifiedAt": "2026-08-05T11:32:22.196Z", "state": "published", "provider": "Linux", "title": "net: fix __dst_negative_advice() race", "descriptions": [ { "lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix __dst_negative_advice() race\n\n__dst_negative_advice() does not enforce proper RCU rules when\nsk->dst_cache must be cleared, leading to possible UAF.\n\nRCU rules are that we must first clear sk->sk_dst_cache,\nthen call dst_release(old_dst).\n\nNote that sk_dst_reset(sk) is implementing this protocol correctly,\nwhile __dst_negative_advice() uses the wrong order.\n\nGiven that ip6_negative_advice() has special logic\nagainst RTF_CACHE, this means each of the three ->negative_advice()\nexisting methods must perform the sk_dst_reset() themselves.\n\nNote the check against NULL dst is centralized in\n__dst_negative_advice(), there is no need to duplicate\nit in various callbacks.\n\nMany thanks to Clement Lecigne for tracking this issue.\n\nThis old bug became visible after the blamed commit, using UDP sockets.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Android contains an unspecified vulnerability in the kernel that allows for remote code execution. This vulnerability resides in Linux Kernel and could impact other products, including but not limited to Android OS.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-36971", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Linux", "product": "Linux", "sourcePath": "/containers/cna/affected/0", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [ "include/net/dst_ops.h", "include/net/sock.h", "net/ipv4/route.c", "net/ipv6/route.c", "net/xfrm/xfrm_policy.c" ], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314", "lessThan": "051c0bde9f0450a2ec3d62a86d2a0d2fad117f13", "versionType": "git", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314", "lessThan": "db0082825037794c5dba9959c9de13ca34cc5e72", "versionType": "git", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314", "lessThan": "2295a7ef5c8c49241bff769e7826ef2582e532a6", "versionType": "git", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314", "lessThan": "eacb8b195579c174a6d3e12a9690b206eb7f28cf", "versionType": "git", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314", "lessThan": "81dd3c82a456b0015461754be7cb2693991421b4", "versionType": "git", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314", "lessThan": "5af198c387128a9d2ddd620b0f0803564a4d4508", "versionType": "git", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314", "lessThan": "b8af8e6118a6605f0e495a58d591ca94a85a50fc", "versionType": "git", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314", "lessThan": "92f1655aa2b2294d0b49925f3b875a634bd3b59e", "versionType": "git", "status": "affected" } ] }, { "vendor": "Linux", "product": "Linux", "sourcePath": "/containers/cna/affected/1", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [ "include/net/dst_ops.h", "include/net/sock.h", "net/ipv4/route.c", "net/ipv6/route.c", "net/xfrm/xfrm_policy.c" ], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "4.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/1", "version": "0", "lessThan": "4.6", "versionType": "semver", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/1/versions/2", "version": "4.19.316", "lessThanOrEqual": "4.19.*", "versionType": "semver", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/1/versions/3", "version": "5.4.278", "lessThanOrEqual": "5.4.*", "versionType": "semver", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/1/versions/4", "version": "5.10.219", "lessThanOrEqual": "5.10.*", "versionType": "semver", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/1/versions/5", "version": "5.15.161", "lessThanOrEqual": "5.15.*", "versionType": "semver", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/1/versions/6", "version": "6.1.94", "lessThanOrEqual": "6.1.*", "versionType": "semver", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/1/versions/7", "version": "6.6.34", "lessThanOrEqual": "6.6.*", "versionType": "semver", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/1/versions/8", "version": "6.9.4", "lessThanOrEqual": "6.9.*", "versionType": "semver", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/1/versions/9", "version": "6.10", "lessThanOrEqual": "*", "versionType": "original_commit_for_fix", "status": "unaffected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "provider": "Linux", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" }, { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://git.kernel.org/stable/c/051c0bde9f0450a2ec3d62a86d2a0d2fad117f13", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://git.kernel.org/stable/c/db0082825037794c5dba9959c9de13ca34cc5e72", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://git.kernel.org/stable/c/2295a7ef5c8c49241bff769e7826ef2582e532a6", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://git.kernel.org/stable/c/eacb8b195579c174a6d3e12a9690b206eb7f28cf", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "https://git.kernel.org/stable/c/81dd3c82a456b0015461754be7cb2693991421b4", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/4" }, { "url": "https://git.kernel.org/stable/c/5af198c387128a9d2ddd620b0f0803564a4d4508", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/5" }, { "url": "https://git.kernel.org/stable/c/b8af8e6118a6605f0e495a58d591ca94a85a50fc", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/6" }, { "url": "https://git.kernel.org/stable/c/92f1655aa2b2294d0b49925f3b875a634bd3b59e", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/7" }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/0/references/8" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-36971", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36971.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"Linux\",\"vendor\":\"Linux\",\"defaultStatus\":\"unaffected\",\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"programFiles\":[\"include/net/dst_ops.h\",\"include/net/sock.h\",\"net/ipv4/route.c\",\"net/ipv6/route.c\",\"net/xfrm/xfrm_policy.c\"],\"versions\":[{\"version\":\"a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314\",\"lessThan\":\"051c0bde9f0450a2ec3d62a86d2a0d2fad117f13\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314\",\"lessThan\":\"db0082825037794c5dba9959c9de13ca34cc5e72\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314\",\"lessThan\":\"2295a7ef5c8c49241bff769e7826ef2582e532a6\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314\",\"lessThan\":\"eacb8b195579c174a6d3e12a9690b206eb7f28cf\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314\",\"lessThan\":\"81dd3c82a456b0015461754be7cb2693991421b4\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314\",\"lessThan\":\"5af198c387128a9d2ddd620b0f0803564a4d4508\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314\",\"lessThan\":\"b8af8e6118a6605f0e495a58d591ca94a85a50fc\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314\",\"lessThan\":\"92f1655aa2b2294d0b49925f3b875a634bd3b59e\",\"status\":\"affected\",\"versionType\":\"git\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36971.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"product\":\"Linux\",\"vendor\":\"Linux\",\"defaultStatus\":\"affected\",\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"programFiles\":[\"include/net/dst_ops.h\",\"include/net/sock.h\",\"net/ipv4/route.c\",\"net/ipv6/route.c\",\"net/xfrm/xfrm_policy.c\"],\"versions\":[{\"version\":\"4.6\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.6\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"4.19.316\",\"lessThanOrEqual\":\"4.19.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"5.4.278\",\"lessThanOrEqual\":\"5.4.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"5.10.219\",\"lessThanOrEqual\":\"5.10.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"5.15.161\",\"lessThanOrEqual\":\"5.15.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"6.1.94\",\"lessThanOrEqual\":\"6.1.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"6.6.34\",\"lessThanOrEqual\":\"6.6.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"6.9.4\",\"lessThanOrEqual\":\"6.9.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"6.10\",\"lessThanOrEqual\":\"*\",\"status\":\"unaffected\",\"versionType\":\"original_commit_for_fix\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36971.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix __dst_negative_advice() race\n\n__dst_negative_advice() does not enforce proper RCU rules when\nsk->dst_cache must be cleared, leading to possible UAF.\n\nRCU rules are that we must first clear sk->sk_dst_cache,\nthen call dst_release(old_dst).\n\nNote that sk_dst_reset(sk) is implementing this protocol correctly,\nwhile __dst_negative_advice() uses the wrong order.\n\nGiven that ip6_negative_advice() has special logic\nagainst RTF_CACHE, this means each of the three ->negative_advice()\nexisting methods must perform the sk_dst_reset() themselves.\n\nNote the check against NULL dst is centralized in\n__dst_negative_advice(), there is no need to duplicate\nit in various callbacks.\n\nMany thanks to Clement Lecigne for tracking this issue.\n\nThis old bug became visible after the blamed commit, using UDP sockets.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36971.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36971.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-36971:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-36971", "sourcePath": "retained:/originalText", "text": "Android contains an unspecified vulnerability in the kernel that allows for remote code execution. This vulnerability resides in Linux Kernel and could impact other products, including but not limited to Android OS.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-36971:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-36971", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-36971", "modifiedAt": "2024-08-07T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-05T11:32:22.196Z", "fetchedAt": "2026-10-24T05:13:04.080Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-08-07T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Linuxに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:13:04.080Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "25a115f1b875a1b452877da5a149da0ee382f09d50ff378dddc6141eab18a1e4", "sourceModifiedAt": "2026-08-05T11:32:22.196Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Linux カーネルにおいて、__dst_negative_advice() が sk->dst_cache をクリアする際に正しい RCU ルールを守らず、先に sk->sk_dst_cache をクリアせずに dst_release(old_dst) を呼んでしまうため、使用後解放 (UAF) が発生する可能性があります。sk_dst_reset() は正しい手順を実装していますが、__dst_negative_advice() は順序が間違っています。ip6_negative_advice() の特別なロジックにより、3 つの ->negative_advice() メソッドすべてが自分で sk_dst_reset() を実行しなければなりません。このバグは UDP ソケットを使用したときに顕在化しました。", "risk": "使用後解放 (UAF) が発生する可能性がある。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "Linux カーネルで __dst_negative_advice() が呼び出される場合。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36971.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "sk->dst_cache をクリアする必要があるが、RCU ルール（先に sk->sk_dst_cache をクリアし、その後 dst_release(old_dst) を呼ぶ）を守らない場合。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36971.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "ip6_negative_advice() が使用され、RTF_CACHE に対する特別なロジックがある場合。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36971.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "UDP ソケットを使用した際にこのバグが顕在化する場合。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36971.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Linux / Linux。影響ありとして記載：a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314以上、051c0bde9f0450a2ec3d62a86d2a0d2fad117f13未満。影響ありとして記載：a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314以上、db0082825037794c5dba9959c9de13ca34cc5e72未満。影響ありとして記載：a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314以上、2295a7ef5c8c49241bff769e7826ef2582e532a6未満。影響ありとして記載：a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314以上、eacb8b195579c174a6d3e12a9690b206eb7f28cf未満。影響ありとして記載：a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314以上、81dd3c82a456b0015461754be7cb2693991421b4未満。影響ありとして記載：a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314以上、5af198c387128a9d2ddd620b0f0803564a4d4508未満。影響ありとして記載：a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314以上、b8af8e6118a6605f0e495a58d591ca94a85a50fc未満。影響ありとして記載：a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314以上、92f1655aa2b2294d0b49925f3b875a634bd3b59e未満。対象のファイル：include/net/dst_ops.h、include/net/sock.h、net/ipv4/route.c、net/ipv6/route.c、net/xfrm/xfrm_policy.c", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36971.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Linux / Linux。影響ありとして記載：4.6。影響なしとして記載：4.6未満の版。影響なしとして記載：4.19.316以上、4.19.*以下。影響なしとして記載：5.4.278以上、5.4.*以下。影響なしとして記載：5.10.219以上、5.10.*以下。影響なしとして記載：5.15.161以上、5.15.*以下。影響なしとして記載：6.1.94以上、6.1.*以下。影響なしとして記載：6.6.34以上、6.6.*以下。影響なしとして記載：6.9.4以上、6.9.*以下。影響なしとして記載：6.10以上（原資料の上限表記は「*」）。対象のファイル：include/net/dst_ops.h、include/net/sock.h、net/ipv4/route.c、net/ipv6/route.c、net/xfrm/xfrm_policy.c。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36971.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-36971" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36971.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Linux」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-36971", "https://git.kernel.org/stable/c/051c0bde9f0450a2ec3d62a86d2a0d2fad117f13", "https://git.kernel.org/stable/c/db0082825037794c5dba9959c9de13ca34cc5e72", "https://git.kernel.org/stable/c/2295a7ef5c8c49241bff769e7826ef2582e532a6", "https://git.kernel.org/stable/c/eacb8b195579c174a6d3e12a9690b206eb7f28cf", "https://git.kernel.org/stable/c/81dd3c82a456b0015461754be7cb2693991421b4", "https://git.kernel.org/stable/c/5af198c387128a9d2ddd620b0f0803564a4d4508", "https://git.kernel.org/stable/c/b8af8e6118a6605f0e495a58d591ca94a85a50fc", "https://git.kernel.org/stable/c/92f1655aa2b2294d0b49925f3b875a634bd3b59e", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-36971", "https://source.android.com/docs/security/bulletin/2024-08-01", "https://lore.kernel.org/linux-cve-announce/20240610090330.1347021-2-lee@kernel.org/T/#u", "https://nvd.nist.gov/vuln/detail/CVE-2024-36971" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36971.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-36971", "https://git.kernel.org/stable/c/051c0bde9f0450a2ec3d62a86d2a0d2fad117f13", "https://git.kernel.org/stable/c/db0082825037794c5dba9959c9de13ca34cc5e72", "https://git.kernel.org/stable/c/2295a7ef5c8c49241bff769e7826ef2582e532a6", "https://git.kernel.org/stable/c/eacb8b195579c174a6d3e12a9690b206eb7f28cf", "https://git.kernel.org/stable/c/81dd3c82a456b0015461754be7cb2693991421b4", "https://git.kernel.org/stable/c/5af198c387128a9d2ddd620b0f0803564a4d4508", "https://git.kernel.org/stable/c/b8af8e6118a6605f0e495a58d591ca94a85a50fc", "https://git.kernel.org/stable/c/92f1655aa2b2294d0b49925f3b875a634bd3b59e", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-36971", "https://source.android.com/docs/security/bulletin/2024-08-01", "https://lore.kernel.org/linux-cve-announce/20240610090330.1347021-2-lee@kernel.org/T/#u", "https://nvd.nist.gov/vuln/detail/CVE-2024-36971" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36971.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-36971", "https://git.kernel.org/stable/c/051c0bde9f0450a2ec3d62a86d2a0d2fad117f13", "https://git.kernel.org/stable/c/db0082825037794c5dba9959c9de13ca34cc5e72", "https://git.kernel.org/stable/c/2295a7ef5c8c49241bff769e7826ef2582e532a6", "https://git.kernel.org/stable/c/eacb8b195579c174a6d3e12a9690b206eb7f28cf", "https://git.kernel.org/stable/c/81dd3c82a456b0015461754be7cb2693991421b4", "https://git.kernel.org/stable/c/5af198c387128a9d2ddd620b0f0803564a4d4508", "https://git.kernel.org/stable/c/b8af8e6118a6605f0e495a58d591ca94a85a50fc", "https://git.kernel.org/stable/c/92f1655aa2b2294d0b49925f3b875a634bd3b59e", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-36971", "https://source.android.com/docs/security/bulletin/2024-08-01", "https://lore.kernel.org/linux-cve-announce/20240610090330.1347021-2-lee@kernel.org/T/#u", "https://nvd.nist.gov/vuln/detail/CVE-2024-36971" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36971.json", "label": "CVE：Linux" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-36971", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-36971", "label": "CVE公式レコード" }, { "url": "https://git.kernel.org/stable/c/051c0bde9f0450a2ec3d62a86d2a0d2fad117f13", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/db0082825037794c5dba9959c9de13ca34cc5e72", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/2295a7ef5c8c49241bff769e7826ef2582e532a6", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/eacb8b195579c174a6d3e12a9690b206eb7f28cf", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/81dd3c82a456b0015461754be7cb2693991421b4", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/5af198c387128a9d2ddd620b0f0803564a4d4508", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/b8af8e6118a6605f0e495a58d591ca94a85a50fc", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/92f1655aa2b2294d0b49925f3b875a634bd3b59e", "label": "CVE掲載の参考情報" }, { "url": "https://source.android.com/docs/security/bulletin/2024-08-01", "label": "CISAが示す関連情報" }, { "url": "https://lore.kernel.org/linux-cve-announce/20240610090330.1347021-2-lee@kernel.org/T/#u", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-36971", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36971.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix __dst_negative_advice() race\n\n__dst_negative_advice() does not enforce proper RCU rules when\nsk->dst_cache must be cleared, leading to possible UAF.\n\nRCU rules are that we must first clear sk->sk_dst_cache,\nthen call dst_release(old_dst).\n\nNote that sk_dst_reset(sk) is implementing this protocol correctly,\nwhile __dst_negative_advice() uses the wrong order.\n\nGiven that ip6_negative_advice() has special logic\nagainst RTF_CACHE, this means each of the three ->negative_advice()\nexisting methods must perform the sk_dst_reset() themselves.\n\nNote the check against NULL dst is centralized in\n__dst_negative_advice(), there is no need to duplicate\nit in various callbacks.\n\nMany thanks to Clement Lecigne for tracking this issue.\n\nThis old bug became visible after the blamed commit, using UDP sockets.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36971.json", "sourceField": "/containers/cna/title", "excerpt": "net: fix __dst_negative_advice() race", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36971.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"Linux\",\"vendor\":\"Linux\",\"defaultStatus\":\"unaffected\",\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"programFiles\":[\"include/net/dst_ops.h\",\"include/net/sock.h\",\"net/ipv4/route.c\",\"net/ipv6/route.c\",\"net/xfrm/xfrm_policy.c\"],\"versions\":[{\"version\":\"a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314\",\"lessThan\":\"051c0bde9f0450a2ec3d62a86d2a0d2fad117f13\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314\",\"lessThan\":\"db0082825037794c5dba9959c9de13ca34cc5e72\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314\",\"lessThan\":\"2295a7ef5c8c49241bff769e7826ef2582e532a6\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314\",\"lessThan\":\"eacb8b195579c174a6d3e12a9690b206eb7f28cf\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314\",\"lessThan\":\"81dd3c82a456b0015461754be7cb2693991421b4\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314\",\"lessThan\":\"5af198c387128a9d2ddd620b0f0803564a4d4508\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314\",\"lessThan\":\"b8af8e6118a6605f0e495a58d591ca94a85a50fc\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314\",\"lessThan\":\"92f1655aa2b2294d0b49925f3b875a634bd3b59e\",\"status\":\"affected\",\"versionType\":\"git\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36971.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"product\":\"Linux\",\"vendor\":\"Linux\",\"defaultStatus\":\"affected\",\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"programFiles\":[\"include/net/dst_ops.h\",\"include/net/sock.h\",\"net/ipv4/route.c\",\"net/ipv6/route.c\",\"net/xfrm/xfrm_policy.c\"],\"versions\":[{\"version\":\"4.6\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.6\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"4.19.316\",\"lessThanOrEqual\":\"4.19.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"5.4.278\",\"lessThanOrEqual\":\"5.4.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"5.10.219\",\"lessThanOrEqual\":\"5.10.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"5.15.161\",\"lessThanOrEqual\":\"5.15.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"6.1.94\",\"lessThanOrEqual\":\"6.1.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"6.6.34\",\"lessThanOrEqual\":\"6.6.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"6.9.4\",\"lessThanOrEqual\":\"6.9.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"6.10\",\"lessThanOrEqual\":\"*\",\"status\":\"unaffected\",\"versionType\":\"original_commit_for_fix\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-36971", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-36971\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-36971（Linux）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Linux カーネルで __dst_negative_advice() が呼び出される場合。\n・sk->dst_cache をクリアする必要があるが、RCU ルール（先に sk->sk_dst_cache をクリアし、その後 dst_release(old_dst) を呼ぶ）を守らない場合。\n・ip6_negative_advice() が使用され、RTF_CACHE に対する特別なロジックがある場合。\n・UDP ソケットを使用した際にこのバグが顕在化する場合。\n・公式の対象表：Linux / Linux。影響ありとして記載：a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314以上、051c0bde9f0450a2ec3d62a86d2a0d2fad117f13未満。影響ありとして記載：a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314以上、db0082825037794c5dba9959c9de13ca34cc5e72未満。影響ありとして記載：a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314以上、2295a7ef5c8c49241bff769e7826ef2582e532a6未満。影響ありとして記載：a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314以上、eacb8b195579c174a6d3e12a9690b206eb7f28cf未満。影響ありとして記載：a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314以上、81dd3c82a456b0015461754be7cb2693991421b4未満。影響ありとして記載：a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314以上、5af198c387128a9d2ddd620b0f0803564a4d4508未満。影響ありとして記載：a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314以上、b8af8e6118a6605f0e495a58d591ca94a85a50fc未満。影響ありとして記載：a87cb3e48ee86d29868d3f59cfb9ce1a8fa63314以上、92f1655aa2b2294d0b49925f3b875a634bd3b59e未満。対象のファイル：include/net/dst_ops.h、include/net/sock.h、net/ipv4/route.c、net/ipv6/route.c、net/xfrm/xfrm_policy.c\n・公式の対象表：Linux / Linux。影響ありとして記載：4.6。影響なしとして記載：4.6未満の版。影響なしとして記載：4.19.316以上、4.19.*以下。影響なしとして記載：5.4.278以上、5.4.*以下。影響なしとして記載：5.10.219以上、5.10.*以下。影響なしとして記載：5.15.161以上、5.15.*以下。影響なしとして記載：6.1.94以上、6.1.*以下。影響なしとして記載：6.6.34以上、6.6.*以下。影響なしとして記載：6.9.4以上、6.9.*以下。影響なしとして記載：6.10以上（原資料の上限表記は「*」）。対象のファイル：include/net/dst_ops.h、include/net/sock.h、net/ipv4/route.c、net/ipv6/route.c、net/xfrm/xfrm_policy.c。個別に例外が記されていない版も、原資料では影響ありとされています。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-36971", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:13:04.080Z", "lastSuccess": "2026-10-24T05:13:04.080Z", "sourceCheckedAt": "2026-10-24T05:13:04.080Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2018-0824", "aliases": [], "title": "n/a：コード実行", "summary": "Microsoft COM for Windows がシリアライズされたオブジェクトを正しく処理できないため、リモートコード実行の脆弱性が存在します。影響を受けるのは Windows 7、Windows Server 2012 R2、Windows RT 8.1、Windows Server 2008、Windows Server 2012、Windows 8.1、Windows Server 2016、Windows Server 2008 R2、Windows 10、Windows 10 Server です。", "risk": "特別に作成されたファイルやスクリプトを使用されると、特権昇格とサーバーや機器に攻撃者の命令を実行させられる可能性があります。", "product": "Microsoft Windows", "category": "windows", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "microsoft", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "「CVE-2018-0824」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0824.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0824", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2018-0824", "label": "CVE公式レコード" }, { "url": "http://www.securitytracker.com/id/1040848", "label": "1040848" }, { "url": "https://www.exploit-db.com/exploits/44906/", "label": "44906" }, { "url": "http://www.securityfocus.com/bid/104030", "label": "104030" }, { "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0824", "label": "CVE掲載の参考情報" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-0824", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0824", "label": "CISAが示す関連情報" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "publishedAt": "2018-05-09T19:00:00.000Z", "modifiedAt": "2025-10-21T23:45:51.530Z", "fetchedAt": "2026-10-24T08:03:53.934Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A remote code execution vulnerability exists in \"Microsoft COM for Windows\" when it fails to properly handle serialized objects, aka \"Microsoft COM for Windows Remote Code Execution Vulnerability.\" This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2018-0824", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0824.json", "fetchedAt": "2026-10-24T08:03:53.934Z", "publishedAt": "2018-05-09T19:00:00.000Z", "modifiedAt": "2025-10-21T23:45:51.530Z", "state": "published", "provider": "microsoft", "title": "", "descriptions": [ { "lang": "en", "value": "A remote code execution vulnerability exists in \"Microsoft COM for Windows\" when it fails to properly handle serialized objects, aka \"Microsoft COM for Windows Remote Code Execution Vulnerability.\" This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Microsoft COM for Windows contains a deserialization of untrusted data vulnerability that allows for privilege escalation and remote code execution via a specially crafted file or script.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0824", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "http://www.securitytracker.com/id/1040848", "label": "1040848", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.exploit-db.com/exploits/44906/", "label": "44906", "tags": [ "exploit", "x_refsource_EXPLOIT-DB", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "http://www.securityfocus.com/bid/104030", "label": "104030", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" }, { "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0824", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/3" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0824", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0824.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0824.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A remote code execution vulnerability exists in \"Microsoft COM for Windows\" when it fails to properly handle serialized objects, aka \"Microsoft COM for Windows Remote Code Execution Vulnerability.\" This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0824.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"n/a\",\"lang\":\"en\",\"type\":\"text\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0824.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":7.5,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2018-0824:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0824", "sourcePath": "retained:/originalText", "text": "Microsoft COM for Windows contains a deserialization of untrusted data vulnerability that allows for privilege escalation and remote code execution via a specially crafted file or script.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2018-0824:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0824", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0824", "modifiedAt": "2024-08-05T00:00:00.000Z", "fetchedAt": "2026-10-24T07:17:50.339Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:45:51.530Z", "fetchedAt": "2026-10-24T08:03:53.934Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-08-05T00:00:00.000Z", "fetchedAt": "2026-10-24T07:17:50.339Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "n/aにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T08:03:53.934Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "d5f7ececa0271dd2e7e5268123082a3d319f26f517c4c47dd8b7a7ca9a4ede94", "sourceModifiedAt": "2025-10-21T23:45:51.530Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Microsoft COM for Windows がシリアライズされたオブジェクトを正しく処理できないため、リモートコード実行の脆弱性が存在します。影響を受けるのは Windows 7、Windows Server 2012 R2、Windows RT 8.1、Windows Server 2008、Windows Server 2012、Windows 8.1、Windows Server 2016、Windows Server 2008 R2、Windows 10、Windows 10 Server です。", "risk": "特別に作成されたファイルやスクリプトを使用されると、特権昇格とサーバーや機器に攻撃者の命令を実行させられる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "Microsoft COM for Windows がシリアライズされたオブジェクトを正しく処理できない場合に脆弱性が発生します。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0824.json" ], "evidenceIds": [ "E1" ] }, { "text": "攻撃者は特別に作成されたファイルまたはスクリプトを利用して攻撃を実行できます。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0824" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0824.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0824" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0824.json" ], "evidenceIds": [ "E3" ] }, { "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0824" ], "evidenceIds": [ "E4" ] }, { "text": "「CVE-2018-0824」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2018-0824", "http://www.securitytracker.com/id/1040848", "https://www.exploit-db.com/exploits/44906/", "http://www.securityfocus.com/bid/104030", "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0824", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0824", "https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-0824", "https://nvd.nist.gov/vuln/detail/CVE-2018-0824" ] }, { "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates" ] } ], "temporaryMitigations": [ { "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "https://www.cve.org/CVERecord?id=CVE-2018-0824", "http://www.securitytracker.com/id/1040848", "https://www.exploit-db.com/exploits/44906/", "http://www.securityfocus.com/bid/104030", "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0824", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0824", "https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-0824", "https://nvd.nist.gov/vuln/detail/CVE-2018-0824" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0824.json" ], "evidenceIds": [ "E3" ] }, { "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0824.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0824", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2018-0824", "label": "CVE公式レコード" }, { "url": "http://www.securitytracker.com/id/1040848", "label": "1040848" }, { "url": "https://www.exploit-db.com/exploits/44906/", "label": "44906" }, { "url": "http://www.securityfocus.com/bid/104030", "label": "104030" }, { "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0824", "label": "CVE掲載の参考情報" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-0824", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0824", "label": "CISAが示す関連情報" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0824.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A remote code execution vulnerability exists in \"Microsoft COM for Windows\" when it fails to properly handle serialized objects, aka \"Microsoft COM for Windows Remote Code Execution Vulnerability.\" This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0824", "sourceField": "retained:/originalText", "excerpt": "Microsoft COM for Windows contains a deserialization of untrusted data vulnerability that allows for privilege escalation and remote code execution via a specially crafted file or script.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2018/0xxx/CVE-2018-0824.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0824", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0824", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2018-0824\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2018-0824（Microsoft Windows）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Microsoft COM for Windows がシリアライズされたオブジェクトを正しく処理できない場合に脆弱性が発生します。\n・攻撃者は特別に作成されたファイルまたはスクリプトを利用して攻撃を実行できます。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2018-0824", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T08:03:53.934Z", "lastSuccess": "2026-10-24T08:03:53.934Z", "sourceCheckedAt": "2026-10-24T08:03:53.934Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2024-37085", "aliases": [], "title": "VMware ESXi / VMware Cloud Foundation：認証の回避", "summary": "VMware ESXi には認証バイパスの脆弱性があり、Active Directory (AD) の十分な権限を持つ攻撃者が、AD でユーザー管理を行うよう設定された ESXi ホストに対し、削除された AD グループ（デフォルトは「ESXi Admins」）を再作成することで、フルアクセスを取得できる。", "risk": "攻撃者がフルアクセスを取得すると、ESXi ホスト上のすべての操作を実行できるようになる。", "product": "VMware ESXi / VMware Cloud Foundation", "category": "other", "component": "package", "severity": "medium", "cvss": 6.8, "cvssVersion": "3.1", "cvssSource": "vmware", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H", "affected": [ { "product": "VMware ESXi", "range": ">= 8.0 / < ESXi80U3-24022510" }, { "product": "VMware ESXi", "range": "7.0" }, { "product": "VMware Cloud Foundation", "range": "5.x" }, { "product": "VMware Cloud Foundation", "range": "4.x" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止する。", "「CVE-2024-37085」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/37xxx/CVE-2024-37085.json", "label": "CVE：vmware" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37085", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-37085", "label": "CVE公式レコード" }, { "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-37085", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-06-25T14:16:01.280Z", "modifiedAt": "2025-10-21T22:56:21.754Z", "fetchedAt": "2026-10-24T05:13:16.291Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management https://blogs.vmware.com/vsphere/2012/09/joining-vsphere-hosts-to-active-directory.html by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "product": "VMware ESXi", "vendor": "n/a", "versions": [ { "lessThan": "ESXi80U3-24022510", "status": "affected", "version": "8.0", "versionType": "custom" }, { "status": "affected", "version": "7.0" } ] }, { "defaultStatus": "unaffected", "product": "VMware Cloud Foundation", "vendor": "n/a", "versions": [ { "status": "affected", "version": "5.x" }, { "status": "affected", "version": "4.x" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-37085", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/37xxx/CVE-2024-37085.json", "fetchedAt": "2026-10-24T05:13:16.291Z", "publishedAt": "2024-06-25T14:16:01.280Z", "modifiedAt": "2025-10-21T22:56:21.754Z", "state": "published", "provider": "vmware", "title": "", "descriptions": [ { "lang": "en", "value": "VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management https://blogs.vmware.com/vsphere/2012/09/joining-vsphere-hosts-to-active-directory.html by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37085", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "n/a", "product": "VMware ESXi", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "8.0", "lessThan": "ESXi80U3-24022510", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "7.0", "status": "affected" } ] }, { "vendor": "n/a", "product": "VMware Cloud Foundation", "sourcePath": "/containers/cna/affected/1", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "5.x", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/1", "version": "4.x", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "Authentication bypass vulnerability", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H", "baseScore": 6.8, "baseSeverity": "MEDIUM", "provider": "vmware", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-37085", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/37xxx/CVE-2024-37085.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"VMware ESXi\",\"vendor\":\"n/a\",\"versions\":[{\"lessThan\":\"ESXi80U3-24022510\",\"status\":\"affected\",\"version\":\"8.0\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"7.0\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/37xxx/CVE-2024-37085.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"VMware Cloud Foundation\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"5.x\"},{\"status\":\"affected\",\"version\":\"4.x\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/37xxx/CVE-2024-37085.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management https://blogs.vmware.com/vsphere/2012/09/joining-vsphere-hosts-to-active-directory.html by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/37xxx/CVE-2024-37085.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"Authentication bypass vulnerability\",\"lang\":\"en\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/37xxx/CVE-2024-37085.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":6.8,\"baseSeverity\":\"MEDIUM\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"HIGH\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"REQUIRED\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-37085:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37085", "sourcePath": "retained:/originalText", "text": "VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-37085:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37085", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37085", "modifiedAt": "2024-07-30T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T22:56:21.754Z", "fetchedAt": "2026-10-24T05:13:16.291Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-07-30T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "VMware ESXi / VMware Cloud Foundationに認証の回避に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "ログインなどの認証を回避され、不正な操作につながる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:13:16.291Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "69e24f8edf9523ea0475ce38223cb69416195abf2d35eb915ef438bfda7ceefb", "sourceModifiedAt": "2025-10-21T22:56:21.754Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "VMware ESXi には認証バイパスの脆弱性があり、Active Directory (AD) の十分な権限を持つ攻撃者が、AD でユーザー管理を行うよう設定された ESXi ホストに対し、削除された AD グループ（デフォルトは「ESXi Admins」）を再作成することで、フルアクセスを取得できる。", "risk": "攻撃者がフルアクセスを取得すると、ESXi ホスト上のすべての操作を実行できるようになる。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "攻撃者が十分な Active Directory 権限を持ち、対象の ESXi ホストが AD をユーザー管理に使用するよう設定されており、かつ AD から削除された「ESXi Admins」グループを再作成できる場合に成立する。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/37xxx/CVE-2024-37085.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37085" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：VMware ESXi。影響ありとして記載：8.0以上、ESXi80U3-24022510未満。影響ありとして記載：7.0。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/37xxx/CVE-2024-37085.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：VMware Cloud Foundation。影響ありとして記載：5.x。影響ありとして記載：4.x。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/37xxx/CVE-2024-37085.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37085" ], "evidenceIds": [ "E7" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/37xxx/CVE-2024-37085.json" ], "evidenceIds": [ "E3" ] }, { "text": "「VMware ESXi / VMware Cloud Foundation」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-37085", "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37085", "https://nvd.nist.gov/vuln/detail/CVE-2024-37085" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止する。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37085" ], "evidenceIds": [ "E5", "E6" ] }, { "text": "「CVE-2024-37085」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-37085", "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37085", "https://nvd.nist.gov/vuln/detail/CVE-2024-37085" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-37085", "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37085", "https://nvd.nist.gov/vuln/detail/CVE-2024-37085" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-37085", "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37085", "https://nvd.nist.gov/vuln/detail/CVE-2024-37085" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/37xxx/CVE-2024-37085.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-37085", "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37085", "https://nvd.nist.gov/vuln/detail/CVE-2024-37085" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/37xxx/CVE-2024-37085.json", "label": "CVE：vmware" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37085", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-37085", "label": "CVE公式レコード" }, { "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-37085", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/37xxx/CVE-2024-37085.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management https://blogs.vmware.com/vsphere/2012/09/joining-vsphere-hosts-to-active-directory.html by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37085", "sourceField": "retained:/originalText", "excerpt": "VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/37xxx/CVE-2024-37085.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"VMware ESXi\",\"vendor\":\"n/a\",\"versions\":[{\"lessThan\":\"ESXi80U3-24022510\",\"status\":\"affected\",\"version\":\"8.0\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"7.0\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/37xxx/CVE-2024-37085.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"VMware Cloud Foundation\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"5.x\"},{\"status\":\"affected\",\"version\":\"4.x\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37085", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37085", "sourceField": "/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null }, { "id": "E7", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-37085", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-37085\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-37085（VMware ESXi / VMware Cloud Foundation）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者が十分な Active Directory 権限を持ち、対象の ESXi ホストが AD をユーザー管理に使用するよう設定されており、かつ AD から削除された「ESXi Admins」グループを再作成できる場合に成立する。\n・公式の対象表：VMware ESXi。影響ありとして記載：8.0以上、ESXi80U3-24022510未満。影響ありとして記載：7.0。\n・公式の対象表：VMware Cloud Foundation。影響ありとして記載：5.x。影響ありとして記載：4.x。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-37085", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:13:16.291Z", "lastSuccess": "2026-10-24T05:13:16.291Z", "sourceCheckedAt": "2026-10-24T05:13:16.291Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-45249", "aliases": [], "title": "Acronis Cyber Infrastructure：脆弱性情報", "summary": "デフォルトパスワードが設定されたままの Acronis Cyber Infrastructure (ACI) において、認証されていないユーザーがリモートでコマンドを実行できる脆弱性が存在します。影響を受けるのは、ビルド 5.0.1-61 未満、5.1.1-71 未満、5.2.1-69 未満、5.3.1-53 未満、5.4.4-132 未満のバージョンです。", "risk": "攻撃者がサーバー上で任意のコマンドを実行できる可能性があります。", "product": "Acronis Cyber Infrastructure", "category": "other", "component": "package", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.0", "cvssSource": "Acronis", "cvssVector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "Acronis Cyber Infrastructure", "range": ">= unspecified / < 5.0.1-61（環境: ACI）" }, { "product": "Acronis Cyber Infrastructure", "range": ">= unspecified / < 5.1.1-71（環境: ACI）" }, { "product": "Acronis Cyber Infrastructure", "range": ">= unspecified / < 5.2.1-69（環境: ACI）" }, { "product": "Acronis Cyber Infrastructure", "range": ">= unspecified / < 5.3.1-53（環境: ACI）" }, { "product": "Acronis Cyber Infrastructure", "range": ">= unspecified / < 5.4.4-132（環境: ACI）" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "「CVE-2023-45249」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/45xxx/CVE-2023-45249.json", "label": "CVE：Acronis" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-45249", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-45249", "label": "CVE公式レコード" }, { "url": "https://security-advisory.acronis.com/advisories/SEC-6452", "label": "CISAが示す関連情報" }, { "url": "https://www.securityweek.com/acronis-product-vulnerability-exploited-in-the-wild/", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45249", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-07-24T14:03:56.481Z", "modifiedAt": "2025-10-21T22:55:49.110Z", "fetchedAt": "2026-10-24T05:13:21.595Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.0.1-61, Acronis Cyber Infrastructure (ACI) before build 5.1.1-71, Acronis Cyber Infrastructure (ACI) before build 5.2.1-69, Acronis Cyber Infrastructure (ACI) before build 5.3.1-53, Acronis Cyber Infrastructure (ACI) before build 5.4.4-132.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Acronis", "product": "Acronis Cyber Infrastructure", "platforms": [ "ACI" ], "versions": [ { "version": "unspecified", "status": "affected", "lessThan": "5.0.1-61", "versionType": "semver" } ], "defaultStatus": "unaffected" }, { "vendor": "Acronis", "product": "Acronis Cyber Infrastructure", "platforms": [ "ACI" ], "versions": [ { "version": "unspecified", "status": "affected", "lessThan": "5.1.1-71", "versionType": "semver" } ], "defaultStatus": "unaffected" }, { "vendor": "Acronis", "product": "Acronis Cyber Infrastructure", "platforms": [ "ACI" ], "versions": [ { "version": "unspecified", "status": "affected", "lessThan": "5.2.1-69", "versionType": "semver" } ], "defaultStatus": "unaffected" }, { "vendor": "Acronis", "product": "Acronis Cyber Infrastructure", "platforms": [ "ACI" ], "versions": [ { "version": "unspecified", "status": "affected", "lessThan": "5.3.1-53", "versionType": "semver" } ], "defaultStatus": "unaffected" }, { "vendor": "Acronis", "product": "Acronis Cyber Infrastructure", "platforms": [ "ACI" ], "versions": [ { "version": "unspecified", "status": "affected", "lessThan": "5.4.4-132", "versionType": "semver" } ], "defaultStatus": "unaffected" } ], "configurationNotes": "対象環境・機能: ACI。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-45249", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/45xxx/CVE-2023-45249.json", "fetchedAt": "2026-10-24T05:13:21.595Z", "publishedAt": "2024-07-24T14:03:56.481Z", "modifiedAt": "2025-10-21T22:55:49.110Z", "state": "published", "provider": "Acronis", "title": "", "descriptions": [ { "lang": "en", "value": "Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.0.1-61, Acronis Cyber Infrastructure (ACI) before build 5.1.1-71, Acronis Cyber Infrastructure (ACI) before build 5.2.1-69, Acronis Cyber Infrastructure (ACI) before build 5.3.1-53, Acronis Cyber Infrastructure (ACI) before build 5.4.4-132.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Acronis Cyber Infrastructure (ACI) allows an unauthenticated user to execute commands remotely due to the use of default passwords.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-45249", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Acronis", "product": "Acronis Cyber Infrastructure", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [ "ACI" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "unspecified", "lessThan": "5.0.1-61", "versionType": "semver", "status": "affected" } ] }, { "vendor": "Acronis", "product": "Acronis Cyber Infrastructure", "sourcePath": "/containers/cna/affected/1", "defaultStatus": "unaffected", "platforms": [ "ACI" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "unspecified", "lessThan": "5.1.1-71", "versionType": "semver", "status": "affected" } ] }, { "vendor": "Acronis", "product": "Acronis Cyber Infrastructure", "sourcePath": "/containers/cna/affected/2", "defaultStatus": "unaffected", "platforms": [ "ACI" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "unspecified", "lessThan": "5.2.1-69", "versionType": "semver", "status": "affected" } ] }, { "vendor": "Acronis", "product": "Acronis Cyber Infrastructure", "sourcePath": "/containers/cna/affected/3", "defaultStatus": "unaffected", "platforms": [ "ACI" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "unspecified", "lessThan": "5.3.1-53", "versionType": "semver", "status": "affected" } ] }, { "vendor": "Acronis", "product": "Acronis Cyber Infrastructure", "sourcePath": "/containers/cna/affected/4", "defaultStatus": "unaffected", "platforms": [ "ACI" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/4/versions/0", "version": "unspecified", "lessThan": "5.4.4-132", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-1393", "lang": "en", "description": "CWE-1393", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "Acronis", "sourcePath": "/containers/cna/metrics/0/cvssV3_0" } ], "references": [ { "url": "https://security-advisory.acronis.com/advisories/SEC-6452", "label": "SEC-6452", "tags": [ "vendor-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.securityweek.com/acronis-product-vulnerability-exploited-in-the-wild/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-45249", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/45xxx/CVE-2023-45249.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Acronis\",\"product\":\"Acronis Cyber Infrastructure\",\"platforms\":[\"ACI\"],\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"5.0.1-61\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/45xxx/CVE-2023-45249.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Acronis\",\"product\":\"Acronis Cyber Infrastructure\",\"platforms\":[\"ACI\"],\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"5.1.1-71\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/45xxx/CVE-2023-45249.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Acronis\",\"product\":\"Acronis Cyber Infrastructure\",\"platforms\":[\"ACI\"],\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"5.2.1-69\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/45xxx/CVE-2023-45249.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"Acronis\",\"product\":\"Acronis Cyber Infrastructure\",\"platforms\":[\"ACI\"],\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"5.3.1-53\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/45xxx/CVE-2023-45249.json", "sourcePath": "/containers/cna/affected/4", "text": "{\"vendor\":\"Acronis\",\"product\":\"Acronis Cyber Infrastructure\",\"platforms\":[\"ACI\"],\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"5.4.4-132\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/45xxx/CVE-2023-45249.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.0.1-61, Acronis Cyber Infrastructure (ACI) before build 5.1.1-71, Acronis Cyber Infrastructure (ACI) before build 5.2.1-69, Acronis Cyber Infrastructure (ACI) before build 5.3.1-53, Acronis Cyber Infrastructure (ACI) before build 5.4.4-132.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/45xxx/CVE-2023-45249.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-1393\",\"description\":\"CWE-1393\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/45xxx/CVE-2023-45249.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_0", "text": "{\"version\":\"3.0\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-45249:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-45249", "sourcePath": "retained:/originalText", "text": "Acronis Cyber Infrastructure (ACI) allows an unauthenticated user to execute commands remotely due to the use of default passwords.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-45249:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-45249", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-45249", "modifiedAt": "2024-07-29T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T22:55:49.110Z", "fetchedAt": "2026-10-24T05:13:21.595Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-07-29T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Acronis Cyber Infrastructureに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:13:21.595Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "9e03b49708489d16d768fc890ae24019704e7a2900c20360969bbc9f7f7fbbb4", "sourceModifiedAt": "2025-10-21T22:55:49.110Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "デフォルトパスワードが設定されたままの Acronis Cyber Infrastructure (ACI) において、認証されていないユーザーがリモートでコマンドを実行できる脆弱性が存在します。影響を受けるのは、ビルド 5.0.1-61 未満、5.1.1-71 未満、5.2.1-69 未満、5.3.1-53 未満、5.4.4-132 未満のバージョンです。", "risk": "攻撃者がサーバー上で任意のコマンドを実行できる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "対象は、デフォルトパスワードが設定されたままで、認証されていないユーザーがアクセスできる Acronis Cyber Infrastructure (ACI) のビルド 5.0.1-61 未満、5.1.1-71 未満、5.2.1-69 未満、5.3.1-53 未満、5.4.4-132 未満の環境です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/45xxx/CVE-2023-45249.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-45249" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Acronis / Acronis Cyber Infrastructure。影響ありとして記載：5.0.1-61未満（原資料では開始版が未指定）。対象の環境：ACI", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/45xxx/CVE-2023-45249.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Acronis / Acronis Cyber Infrastructure。影響ありとして記載：5.1.1-71未満（原資料では開始版が未指定）。対象の環境：ACI", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/45xxx/CVE-2023-45249.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Acronis / Acronis Cyber Infrastructure。影響ありとして記載：5.2.1-69未満（原資料では開始版が未指定）。対象の環境：ACI", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/45xxx/CVE-2023-45249.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Acronis / Acronis Cyber Infrastructure。影響ありとして記載：5.3.1-53未満（原資料では開始版が未指定）。対象の環境：ACI", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/45xxx/CVE-2023-45249.json" ], "evidenceIds": [ "E6" ] }, { "text": "公式の対象表：Acronis / Acronis Cyber Infrastructure。影響ありとして記載：5.4.4-132未満（原資料では開始版が未指定）。対象の環境：ACI", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/45xxx/CVE-2023-45249.json" ], "evidenceIds": [ "E7" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-45249" ], "evidenceIds": [ "E9" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/45xxx/CVE-2023-45249.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Acronis Cyber Infrastructure」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-45249", "https://security-advisory.acronis.com/advisories/SEC-6452", "https://www.securityweek.com/acronis-product-vulnerability-exploited-in-the-wild/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-45249", "https://nvd.nist.gov/vuln/detail/CVE-2023-45249" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-45249" ], "evidenceIds": [ "E8" ] }, { "text": "「CVE-2023-45249」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-45249", "https://security-advisory.acronis.com/advisories/SEC-6452", "https://www.securityweek.com/acronis-product-vulnerability-exploited-in-the-wild/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-45249", "https://nvd.nist.gov/vuln/detail/CVE-2023-45249" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-45249", "https://security-advisory.acronis.com/advisories/SEC-6452", "https://www.securityweek.com/acronis-product-vulnerability-exploited-in-the-wild/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-45249", "https://nvd.nist.gov/vuln/detail/CVE-2023-45249" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-45249", "https://security-advisory.acronis.com/advisories/SEC-6452", "https://www.securityweek.com/acronis-product-vulnerability-exploited-in-the-wild/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-45249", "https://nvd.nist.gov/vuln/detail/CVE-2023-45249" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/45xxx/CVE-2023-45249.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-45249", "https://security-advisory.acronis.com/advisories/SEC-6452", "https://www.securityweek.com/acronis-product-vulnerability-exploited-in-the-wild/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-45249", "https://nvd.nist.gov/vuln/detail/CVE-2023-45249" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/45xxx/CVE-2023-45249.json", "label": "CVE：Acronis" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-45249", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-45249", "label": "CVE公式レコード" }, { "url": "https://security-advisory.acronis.com/advisories/SEC-6452", "label": "CISAが示す関連情報" }, { "url": "https://www.securityweek.com/acronis-product-vulnerability-exploited-in-the-wild/", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45249", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/45xxx/CVE-2023-45249.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.0.1-61, Acronis Cyber Infrastructure (ACI) before build 5.1.1-71, Acronis Cyber Infrastructure (ACI) before build 5.2.1-69, Acronis Cyber Infrastructure (ACI) before build 5.3.1-53, Acronis Cyber Infrastructure (ACI) before build 5.4.4-132.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-45249", "sourceField": "retained:/originalText", "excerpt": "Acronis Cyber Infrastructure (ACI) allows an unauthenticated user to execute commands remotely due to the use of default passwords.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/45xxx/CVE-2023-45249.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Acronis\",\"product\":\"Acronis Cyber Infrastructure\",\"platforms\":[\"ACI\"],\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"5.0.1-61\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/45xxx/CVE-2023-45249.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Acronis\",\"product\":\"Acronis Cyber Infrastructure\",\"platforms\":[\"ACI\"],\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"5.1.1-71\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/45xxx/CVE-2023-45249.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Acronis\",\"product\":\"Acronis Cyber Infrastructure\",\"platforms\":[\"ACI\"],\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"5.2.1-69\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/45xxx/CVE-2023-45249.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"Acronis\",\"product\":\"Acronis Cyber Infrastructure\",\"platforms\":[\"ACI\"],\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"5.3.1-53\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/45xxx/CVE-2023-45249.json", "sourceField": "/containers/cna/affected/4", "excerpt": "{\"vendor\":\"Acronis\",\"product\":\"Acronis Cyber Infrastructure\",\"platforms\":[\"ACI\"],\"versions\":[{\"version\":\"unspecified\",\"status\":\"affected\",\"lessThan\":\"5.4.4-132\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E8", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-45249", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E9", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-45249", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-45249\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-45249（Acronis Cyber Infrastructure）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象は、デフォルトパスワードが設定されたままで、認証されていないユーザーがアクセスできる Acronis Cyber Infrastructure (ACI) のビルド 5.0.1-61 未満、5.1.1-71 未満、5.2.1-69 未満、5.3.1-53 未満、5.4.4-132 未満の環境です。\n・公式の対象表：Acronis / Acronis Cyber Infrastructure。影響ありとして記載：5.0.1-61未満（原資料では開始版が未指定）。対象の環境：ACI\n・公式の対象表：Acronis / Acronis Cyber Infrastructure。影響ありとして記載：5.1.1-71未満（原資料では開始版が未指定）。対象の環境：ACI\n・公式の対象表：Acronis / Acronis Cyber Infrastructure。影響ありとして記載：5.2.1-69未満（原資料では開始版が未指定）。対象の環境：ACI\n・公式の対象表：Acronis / Acronis Cyber Infrastructure。影響ありとして記載：5.3.1-53未満（原資料では開始版が未指定）。対象の環境：ACI\n・公式の対象表：Acronis / Acronis Cyber Infrastructure。影響ありとして記載：5.4.4-132未満（原資料では開始版が未指定）。対象の環境：ACI\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-45249", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:13:21.595Z", "lastSuccess": "2026-10-24T05:13:21.595Z", "sourceCheckedAt": "2026-10-24T05:13:21.595Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-4879", "aliases": [], "title": "Now Platform：脆弱性情報", "summary": "ServiceNow は、Vancouver と Washington DC の Now Platform リリースで確認された入力検証の脆弱性を修正しました。この脆弱性により、認証されていないユーザーが Now Platform のコンテキスト内でリモートにコードを実行できる可能性があります。ServiceNow はホスト型インスタンスに対して更新を適用し、パートナーおよびセルフホスト顧客向けにも更新をリリースしました。まだ適用していない場合は、インスタンスに該当するセキュリティパッチをできるだけ早く適用することが推奨されます。", "risk": "認証されていないユーザーがこの脆弱性を悪用すると、Now Platform 上でコードがリモートに実行され、システムが攻撃者の制御下に置かれる可能性があります。", "product": "Now Platform", "category": "other", "component": "package", "severity": "critical", "cvss": 9.3, "cvssVersion": "4.0", "cvssSource": "SN", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "affected": [ { "product": "Now Platform", "range": "< Utah Patch 10 Hot Fix 3" }, { "product": "Now Platform", "range": "< Utah Patch 10a Hot Fix 2" }, { "product": "Now Platform", "range": "< Vancouver Patch 6 Hot Fix 2" }, { "product": "Now Platform", "range": "< Vancouver Patch 7 Hot Fix 3b" }, { "product": "Now Platform", "range": "< Vancouver Patch 8 Hot Fix 4" }, { "product": "Now Platform", "range": "< Vancouver Patch 9" }, { "product": "Now Platform", "range": "< Vancouver Patch 10" }, { "product": "Now Platform", "range": "< Washington DC Patch 1 Hot Fix 2b" }, { "product": "Now Platform", "range": "< Washington DC Patch 2 Hot Fix 2" }, { "product": "Now Platform", "range": "< Washington DC Patch 3 Hot Fix 1" }, { "product": "Now Platform", "range": "< Washington DC Patch 4" } ], "fixed": [], "steps": [ "ベンダーが提供するセキュリティパッチまたはホットフィックスを適用してください。", "「CVE-2024-4879」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4879.json", "label": "CVE：SN" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4879", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-4879", "label": "CVE公式レコード" }, { "url": "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1645154", "label": "CISAが示す関連情報" }, { "url": "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1644293", "label": "CVE掲載の参考情報" }, { "url": "https://www.darkreading.com/cloud-security/patchnow-servicenow-critical-rce-bugs-active-exploit", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4879", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-07-10T16:16:39.926Z", "modifiedAt": "2025-10-21T22:55:49.702Z", "fetchedAt": "2026-10-24T05:13:21.922Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow applied an update to hosted instances, and ServiceNow released the update to our partners and self-hosted customers. Listed below are the patches and hot fixes that address the vulnerability. If you have not done so already, we recommend applying security patches relevant to your instance as soon as possible.", "sourceTitle": "Jelly Template Injection Vulnerability in ServiceNow UI Macros", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "product": "Now Platform", "vendor": "ServiceNow", "versions": [ { "lessThan": "Utah Patch 10 Hot Fix 3", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "Utah Patch 10a Hot Fix 2", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "Vancouver Patch 6 Hot Fix 2", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "Vancouver Patch 7 Hot Fix 3b", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "Vancouver Patch 8 Hot Fix 4", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "Vancouver Patch 9", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "Vancouver Patch 10", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "Washington DC Patch 1 Hot Fix 2b", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "Washington DC Patch 2 Hot Fix 2", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "Washington DC Patch 3 Hot Fix 1", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "Washington DC Patch 4", "status": "affected", "version": "0", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-4879", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4879.json", "fetchedAt": "2026-10-24T05:13:21.922Z", "publishedAt": "2024-07-10T16:16:39.926Z", "modifiedAt": "2025-10-21T22:55:49.702Z", "state": "published", "provider": "SN", "title": "Jelly Template Injection Vulnerability in ServiceNow UI Macros", "descriptions": [ { "lang": "en", "value": "ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow applied an update to hosted instances, and ServiceNow released the update to our partners and self-hosted customers. Listed below are the patches and hot fixes that address the vulnerability. If you have not done so already, we recommend applying security patches relevant to your instance as soon as possible.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "ServiceNow Utah, Vancouver, and Washington DC Now Platform releases contain a jelly template injection vulnerability in UI macros. An unauthenticated user could exploit this vulnerability to execute code remotely.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4879", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "ServiceNow", "product": "Now Platform", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "Utah Patch 10 Hot Fix 3", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "0", "lessThan": "Utah Patch 10a Hot Fix 2", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "0", "lessThan": "Vancouver Patch 6 Hot Fix 2", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "0", "lessThan": "Vancouver Patch 7 Hot Fix 3b", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "0", "lessThan": "Vancouver Patch 8 Hot Fix 4", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "0", "lessThan": "Vancouver Patch 9", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "0", "lessThan": "Vancouver Patch 10", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "0", "lessThan": "Washington DC Patch 1 Hot Fix 2b", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/8", "version": "0", "lessThan": "Washington DC Patch 2 Hot Fix 2", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/9", "version": "0", "lessThan": "Washington DC Patch 3 Hot Fix 1", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/10", "version": "0", "lessThan": "Washington DC Patch 4", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-1287", "lang": "en", "description": "CWE-1287 Improper Validation of Specified Type of Input", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "baseScore": 9.3, "baseSeverity": "CRITICAL", "provider": "SN", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" }, { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "SN", "sourcePath": "/containers/cna/metrics/1/cvssV3_1" } ], "references": [ { "url": "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1645154", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1644293", "label": "CVE", "tags": [ "x_login-required", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://www.darkreading.com/cloud-security/patchnow-servicenow-critical-rce-bugs-active-exploit", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-4879", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4879.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"Now Platform\",\"vendor\":\"ServiceNow\",\"versions\":[{\"lessThan\":\"Utah Patch 10 Hot Fix 3\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Utah Patch 10a Hot Fix 2\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Vancouver Patch 6 Hot Fix 2\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Vancouver Patch 7 Hot Fix 3b\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Vancouver Patch 8 Hot Fix 4\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Vancouver Patch 9\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Vancouver Patch 10\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Washington DC Patch 1 Hot Fix 2b\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Washington DC Patch 2 Hot Fix 2\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Washington DC Patch 3 Hot Fix 1\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Washington DC Patch 4\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4879.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow applied an update to hosted instances, and ServiceNow released the update to our partners and self-hosted customers. Listed below are the patches and hot fixes that address the vulnerability. If you have not done so already, we recommend applying security patches relevant to your instance as soon as possible.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4879.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-1287\",\"description\":\"CWE-1287 Improper Validation of Specified Type of Input\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4879.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"attackVector\":\"NETWORK\",\"baseScore\":9.3,\"baseSeverity\":\"CRITICAL\",\"privilegesRequired\":\"NONE\",\"providerUrgency\":\"NOT_DEFINED\",\"subAvailabilityImpact\":\"NONE\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"userInteraction\":\"NONE\",\"valueDensity\":\"NOT_DEFINED\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\",\"version\":\"4.0\",\"vulnAvailabilityImpact\":\"HIGH\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/1/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4879.json", "sourcePath": "/containers/cna/metrics/1/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-4879:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4879", "sourcePath": "retained:/originalText", "text": "ServiceNow Utah, Vancouver, and Washington DC Now Platform releases contain a jelly template injection vulnerability in UI macros. An unauthenticated user could exploit this vulnerability to execute code remotely.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-4879:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4879", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4879", "modifiedAt": "2024-07-29T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T22:55:49.702Z", "fetchedAt": "2026-10-24T05:13:21.922Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-07-29T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Now Platformに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:13:21.922Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "a70967519a14842101ece10db954b19fff9bdff972e5058c0fb21e2f995048be", "sourceModifiedAt": "2025-10-21T22:55:49.702Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "ServiceNow は、Vancouver と Washington DC の Now Platform リリースで確認された入力検証の脆弱性を修正しました。この脆弱性により、認証されていないユーザーが Now Platform のコンテキスト内でリモートにコードを実行できる可能性があります。ServiceNow はホスト型インスタンスに対して更新を適用し、パートナーおよびセルフホスト顧客向けにも更新をリリースしました。まだ適用していない場合は、インスタンスに該当するセキュリティパッチをできるだけ早く適用することが推奨されます。", "risk": "認証されていないユーザーがこの脆弱性を悪用すると、Now Platform 上でコードがリモートに実行され、システムが攻撃者の制御下に置かれる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E3", "E1" ], "applicability": [ { "text": "認証されていないユーザーが UI マクロを通じて Jelly テンプレートを操作できる環境で、Vancouver、Washington DC、または Utah の Now Platform リリースが使用されている場合に影響します。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4879.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4879" ], "evidenceIds": [ "E1", "E3", "E2" ] }, { "text": "公式の対象表：ServiceNow / Now Platform。影響ありとして記載：Utah Patch 10 Hot Fix 3未満の版。影響ありとして記載：Utah Patch 10a Hot Fix 2未満の版。影響ありとして記載：Vancouver Patch 6 Hot Fix 2未満の版。影響ありとして記載：Vancouver Patch 7 Hot Fix 3b未満の版。影響ありとして記載：Vancouver Patch 8 Hot Fix 4未満の版。影響ありとして記載：Vancouver Patch 9未満の版。影響ありとして記載：Vancouver Patch 10未満の版。影響ありとして記載：Washington DC Patch 1 Hot Fix 2b未満の版。影響ありとして記載：Washington DC Patch 2 Hot Fix 2未満の版。影響ありとして記載：Washington DC Patch 3 Hot Fix 1未満の版。影響ありとして記載：Washington DC Patch 4未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4879.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4879" ], "evidenceIds": [ "E7" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4879.json" ], "evidenceIds": [ "E4" ] }, { "text": "「Now Platform」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-4879", "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1645154", "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1644293", "https://www.darkreading.com/cloud-security/patchnow-servicenow-critical-rce-bugs-active-exploit", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4879", "https://nvd.nist.gov/vuln/detail/CVE-2024-4879" ] } ], "actions": [ { "text": "ベンダーが提供するセキュリティパッチまたはホットフィックスを適用してください。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4879.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4879" ], "evidenceIds": [ "E1", "E5", "E6" ] }, { "text": "「CVE-2024-4879」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-4879", "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1645154", "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1644293", "https://www.darkreading.com/cloud-security/patchnow-servicenow-critical-rce-bugs-active-exploit", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4879", "https://nvd.nist.gov/vuln/detail/CVE-2024-4879" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-4879", "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1645154", "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1644293", "https://www.darkreading.com/cloud-security/patchnow-servicenow-critical-rce-bugs-active-exploit", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4879", "https://nvd.nist.gov/vuln/detail/CVE-2024-4879" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-4879", "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1645154", "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1644293", "https://www.darkreading.com/cloud-security/patchnow-servicenow-critical-rce-bugs-active-exploit", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4879", "https://nvd.nist.gov/vuln/detail/CVE-2024-4879" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4879.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-4879", "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1645154", "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1644293", "https://www.darkreading.com/cloud-security/patchnow-servicenow-critical-rce-bugs-active-exploit", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4879", "https://nvd.nist.gov/vuln/detail/CVE-2024-4879" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4879.json", "label": "CVE：SN" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4879", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-4879", "label": "CVE公式レコード" }, { "url": "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1645154", "label": "CISAが示す関連情報" }, { "url": "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1644293", "label": "CVE掲載の参考情報" }, { "url": "https://www.darkreading.com/cloud-security/patchnow-servicenow-critical-rce-bugs-active-exploit", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4879", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4879.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow applied an update to hosted instances, and ServiceNow released the update to our partners and self-hosted customers. Listed below are the patches and hot fixes that address the vulnerability. If you have not done so already, we recommend applying security patches relevant to your instance as soon as possible.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4879.json", "sourceField": "/containers/cna/title", "excerpt": "Jelly Template Injection Vulnerability in ServiceNow UI Macros", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4879", "sourceField": "retained:/originalText", "excerpt": "ServiceNow Utah, Vancouver, and Washington DC Now Platform releases contain a jelly template injection vulnerability in UI macros. An unauthenticated user could exploit this vulnerability to execute code remotely.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/4xxx/CVE-2024-4879.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"Now Platform\",\"vendor\":\"ServiceNow\",\"versions\":[{\"lessThan\":\"Utah Patch 10 Hot Fix 3\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Utah Patch 10a Hot Fix 2\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Vancouver Patch 6 Hot Fix 2\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Vancouver Patch 7 Hot Fix 3b\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Vancouver Patch 8 Hot Fix 4\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Vancouver Patch 9\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Vancouver Patch 10\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Washington DC Patch 1 Hot Fix 2b\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Washington DC Patch 2 Hot Fix 2\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Washington DC Patch 3 Hot Fix 1\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Washington DC Patch 4\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4879", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4879", "sourceField": "/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null }, { "id": "E7", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-4879", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-4879\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-4879（Now Platform）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・認証されていないユーザーが UI マクロを通じて Jelly テンプレートを操作できる環境で、Vancouver、Washington DC、または Utah の Now Platform リリースが使用されている場合に影響します。\n・公式の対象表：ServiceNow / Now Platform。影響ありとして記載：Utah Patch 10 Hot Fix 3未満の版。影響ありとして記載：Utah Patch 10a Hot Fix 2未満の版。影響ありとして記載：Vancouver Patch 6 Hot Fix 2未満の版。影響ありとして記載：Vancouver Patch 7 Hot Fix 3b未満の版。影響ありとして記載：Vancouver Patch 8 Hot Fix 4未満の版。影響ありとして記載：Vancouver Patch 9未満の版。影響ありとして記載：Vancouver Patch 10未満の版。影響ありとして記載：Washington DC Patch 1 Hot Fix 2b未満の版。影響ありとして記載：Washington DC Patch 2 Hot Fix 2未満の版。影響ありとして記載：Washington DC Patch 3 Hot Fix 1未満の版。影響ありとして記載：Washington DC Patch 4未満の版。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-4879", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:13:21.922Z", "lastSuccess": "2026-10-24T05:13:21.922Z", "sourceCheckedAt": "2026-10-24T05:13:21.922Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-5217", "aliases": [], "title": "Now Platform：脆弱性情報", "summary": "ServiceNowは、Washington DC、Vancouver、そしてそれ以前のNow Platformリリースにおいて、GlideExpressionスクリプトの入力検証が不完全である脆弱性を修正しました。この脆弱性により、認証されていないユーザーがリモートでコードを実行できる可能性があります。", "risk": "認証されていないユーザーがリモートでコードを実行できるようになる恐れがあります。", "product": "Now Platform", "category": "other", "component": "package", "severity": "critical", "cvss": 9.2, "cvssVersion": "4.0", "cvssSource": "SN", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "affected": [ { "product": "Now Platform", "range": "< Utah Patch 10 Hot Fix 3" }, { "product": "Now Platform", "range": "< Utah Patch 10a Hot Fix 2" }, { "product": "Now Platform", "range": "< Utah Patch 10b Hot Fix 1" }, { "product": "Now Platform", "range": "< Vancouver Patch 6 Hot Fix 2" }, { "product": "Now Platform", "range": "< Vancouver Patch 7 Hot Fix 3b" }, { "product": "Now Platform", "range": "< Vancouver Patch 8 Hot Fix 4" }, { "product": "Now Platform", "range": "< Vancouver Patch 9 Hot Fix 1" }, { "product": "Now Platform", "range": "< Vancouver Patch 10" }, { "product": "Now Platform", "range": "< Washington DC Patch 1 Hot Fix 3b" }, { "product": "Now Platform", "range": "< Washington DC Patch 2 Hot Fix 2" }, { "product": "Now Platform", "range": "< Washington DC Patch 3 Hot Fix 2" }, { "product": "Now Platform", "range": "< Washington DC Patch 4" }, { "product": "Now Platform", "range": "< Washington DC Patch 5" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/5xxx/CVE-2024-5217.json", "label": "CVE：SN" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-5217", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-5217", "label": "CVE公式レコード" }, { "url": "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1648313", "label": "CISAが示す関連情報" }, { "url": "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1644293", "label": "CVE掲載の参考情報" }, { "url": "https://www.darkreading.com/cloud-security/patchnow-servicenow-critical-rce-bugs-active-exploit", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5217", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-07-10T16:28:32.649Z", "modifiedAt": "2025-10-21T22:55:49.508Z", "fetchedAt": "2026-10-24T05:13:26.848Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earlier Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. The vulnerability is addressed in the listed patches and hot fixes below, which were released during the June 2024 patching cycle. If you have not done so already, we recommend applying security patches relevant to your instance as soon as possible.", "sourceTitle": "Incomplete Input Validation in GlideExpression Script", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "product": "Now Platform", "vendor": "ServiceNow", "versions": [ { "lessThan": "Utah Patch 10 Hot Fix 3", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "Utah Patch 10a Hot Fix 2", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "Utah Patch 10b Hot Fix 1", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "Vancouver Patch 6 Hot Fix 2", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "Vancouver Patch 7 Hot Fix 3b", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "Vancouver Patch 8 Hot Fix 4", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "Vancouver Patch 9 Hot Fix 1", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "Vancouver Patch 10", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "Washington DC Patch 1 Hot Fix 3b", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "Washington DC Patch 2 Hot Fix 2", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "Washington DC Patch 3 Hot Fix 2", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "Washington DC Patch 4", "status": "affected", "version": "0", "versionType": "custom" }, { "lessThan": "Washington DC Patch 5", "status": "affected", "version": "0", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-5217", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/5xxx/CVE-2024-5217.json", "fetchedAt": "2026-10-24T05:13:26.848Z", "publishedAt": "2024-07-10T16:28:32.649Z", "modifiedAt": "2025-10-21T22:55:49.508Z", "state": "published", "provider": "SN", "title": "Incomplete Input Validation in GlideExpression Script", "descriptions": [ { "lang": "en", "value": "ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earlier Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. The vulnerability is addressed in the listed patches and hot fixes below, which were released during the June 2024 patching cycle. If you have not done so already, we recommend applying security patches relevant to your instance as soon as possible.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "ServiceNow Washington DC, Vancouver, and earlier Now Platform releases contain an incomplete list of disallowed inputs vulnerability in the GlideExpression script. An unauthenticated user could exploit this vulnerability to execute code remotely.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-5217", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "ServiceNow", "product": "Now Platform", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "Utah Patch 10 Hot Fix 3", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "0", "lessThan": "Utah Patch 10a Hot Fix 2", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "0", "lessThan": "Utah Patch 10b Hot Fix 1", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "0", "lessThan": "Vancouver Patch 6 Hot Fix 2", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "0", "lessThan": "Vancouver Patch 7 Hot Fix 3b", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "0", "lessThan": "Vancouver Patch 8 Hot Fix 4", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "0", "lessThan": "Vancouver Patch 9 Hot Fix 1", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "0", "lessThan": "Vancouver Patch 10", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/8", "version": "0", "lessThan": "Washington DC Patch 1 Hot Fix 3b", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/9", "version": "0", "lessThan": "Washington DC Patch 2 Hot Fix 2", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/10", "version": "0", "lessThan": "Washington DC Patch 3 Hot Fix 2", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/11", "version": "0", "lessThan": "Washington DC Patch 4", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/12", "version": "0", "lessThan": "Washington DC Patch 5", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-184", "lang": "en", "description": "CWE-184 Incomplete List of Disallowed Inputs", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "baseScore": 9.2, "baseSeverity": "CRITICAL", "provider": "SN", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" }, { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "SN", "sourcePath": "/containers/cna/metrics/1/cvssV3_1" } ], "references": [ { "url": "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1648313", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1644293", "label": "CVE", "tags": [ "x_login-required", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://www.darkreading.com/cloud-security/patchnow-servicenow-critical-rce-bugs-active-exploit", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-5217", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/5xxx/CVE-2024-5217.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"Now Platform\",\"vendor\":\"ServiceNow\",\"versions\":[{\"lessThan\":\"Utah Patch 10 Hot Fix 3\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Utah Patch 10a Hot Fix 2\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Utah Patch 10b Hot Fix 1\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Vancouver Patch 6 Hot Fix 2\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Vancouver Patch 7 Hot Fix 3b\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Vancouver Patch 8 Hot Fix 4\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Vancouver Patch 9 Hot Fix 1\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Vancouver Patch 10\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Washington DC Patch 1 Hot Fix 3b\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Washington DC Patch 2 Hot Fix 2\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Washington DC Patch 3 Hot Fix 2\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Washington DC Patch 4\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Washington DC Patch 5\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/5xxx/CVE-2024-5217.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earlier Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. The vulnerability is addressed in the listed patches and hot fixes below, which were released during the June 2024 patching cycle. If you have not done so already, we recommend applying security patches relevant to your instance as soon as possible.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/5xxx/CVE-2024-5217.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-184\",\"description\":\"CWE-184 Incomplete List of Disallowed Inputs\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/5xxx/CVE-2024-5217.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"PRESENT\",\"attackVector\":\"NETWORK\",\"baseScore\":9.2,\"baseSeverity\":\"CRITICAL\",\"privilegesRequired\":\"NONE\",\"providerUrgency\":\"NOT_DEFINED\",\"subAvailabilityImpact\":\"NONE\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"userInteraction\":\"NONE\",\"valueDensity\":\"NOT_DEFINED\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\",\"version\":\"4.0\",\"vulnAvailabilityImpact\":\"HIGH\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/1/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/5xxx/CVE-2024-5217.json", "sourcePath": "/containers/cna/metrics/1/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-5217:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-5217", "sourcePath": "retained:/originalText", "text": "ServiceNow Washington DC, Vancouver, and earlier Now Platform releases contain an incomplete list of disallowed inputs vulnerability in the GlideExpression script. An unauthenticated user could exploit this vulnerability to execute code remotely.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-5217:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-5217", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-5217", "modifiedAt": "2024-07-29T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T22:55:49.508Z", "fetchedAt": "2026-10-24T05:13:26.848Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-07-29T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Now Platformに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:13:26.848Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "574ad7a8d282d845da6cd379313d3827eddc11d212df9bc7cee788c520891d20", "sourceModifiedAt": "2025-10-21T22:55:49.508Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "ServiceNowは、Washington DC、Vancouver、そしてそれ以前のNow Platformリリースにおいて、GlideExpressionスクリプトの入力検証が不完全である脆弱性を修正しました。この脆弱性により、認証されていないユーザーがリモートでコードを実行できる可能性があります。", "risk": "認証されていないユーザーがリモートでコードを実行できるようになる恐れがあります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E3" ], "applicability": [ { "text": "対象はWashington DC、Vancouver、そしてそれ以前のNow Platformリリースで、GlideExpressionスクリプトに不完全な入力検証リストが含まれています。攻撃者は認証されていない状態でこの脆弱性を利用できます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/5xxx/CVE-2024-5217.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-5217" ], "evidenceIds": [ "E1", "E3", "E2" ] }, { "text": "公式の対象表：ServiceNow / Now Platform。影響ありとして記載：Utah Patch 10 Hot Fix 3未満の版。影響ありとして記載：Utah Patch 10a Hot Fix 2未満の版。影響ありとして記載：Utah Patch 10b Hot Fix 1未満の版。影響ありとして記載：Vancouver Patch 6 Hot Fix 2未満の版。影響ありとして記載：Vancouver Patch 7 Hot Fix 3b未満の版。影響ありとして記載：Vancouver Patch 8 Hot Fix 4未満の版。影響ありとして記載：Vancouver Patch 9 Hot Fix 1未満の版。影響ありとして記載：Vancouver Patch 10未満の版。影響ありとして記載：Washington DC Patch 1 Hot Fix 3b未満の版。影響ありとして記載：Washington DC Patch 2 Hot Fix 2未満の版。影響ありとして記載：Washington DC Patch 3 Hot Fix 2未満の版。影響ありとして記載：Washington DC Patch 4未満の版。影響ありとして記載：Washington DC Patch 5未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/5xxx/CVE-2024-5217.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-5217" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/5xxx/CVE-2024-5217.json" ], "evidenceIds": [ "E4" ] }, { "text": "「Now Platform」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-5217", "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1648313", "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1644293", "https://www.darkreading.com/cloud-security/patchnow-servicenow-critical-rce-bugs-active-exploit", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-5217", "https://nvd.nist.gov/vuln/detail/CVE-2024-5217" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/5xxx/CVE-2024-5217.json" ], "evidenceIds": [ "E4" ] } ], "temporaryMitigations": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-5217" ], "evidenceIds": [ "E5" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/5xxx/CVE-2024-5217.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-5217", "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1648313", "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1644293", "https://www.darkreading.com/cloud-security/patchnow-servicenow-critical-rce-bugs-active-exploit", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-5217", "https://nvd.nist.gov/vuln/detail/CVE-2024-5217" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/5xxx/CVE-2024-5217.json", "label": "CVE：SN" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-5217", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-5217", "label": "CVE公式レコード" }, { "url": "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1648313", "label": "CISAが示す関連情報" }, { "url": "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1644293", "label": "CVE掲載の参考情報" }, { "url": "https://www.darkreading.com/cloud-security/patchnow-servicenow-critical-rce-bugs-active-exploit", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5217", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/5xxx/CVE-2024-5217.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earlier Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. The vulnerability is addressed in the listed patches and hot fixes below, which were released during the June 2024 patching cycle. If you have not done so already, we recommend applying security patches relevant to your instance as soon as possible.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/5xxx/CVE-2024-5217.json", "sourceField": "/containers/cna/title", "excerpt": "Incomplete Input Validation in GlideExpression Script", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-5217", "sourceField": "retained:/originalText", "excerpt": "ServiceNow Washington DC, Vancouver, and earlier Now Platform releases contain an incomplete list of disallowed inputs vulnerability in the GlideExpression script. An unauthenticated user could exploit this vulnerability to execute code remotely.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/5xxx/CVE-2024-5217.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"Now Platform\",\"vendor\":\"ServiceNow\",\"versions\":[{\"lessThan\":\"Utah Patch 10 Hot Fix 3\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Utah Patch 10a Hot Fix 2\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Utah Patch 10b Hot Fix 1\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Vancouver Patch 6 Hot Fix 2\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Vancouver Patch 7 Hot Fix 3b\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Vancouver Patch 8 Hot Fix 4\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Vancouver Patch 9 Hot Fix 1\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Vancouver Patch 10\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Washington DC Patch 1 Hot Fix 3b\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Washington DC Patch 2 Hot Fix 2\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Washington DC Patch 3 Hot Fix 2\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Washington DC Patch 4\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"},{\"lessThan\":\"Washington DC Patch 5\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-5217", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-5217", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-5217\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-5217（Now Platform）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象はWashington DC、Vancouver、そしてそれ以前のNow Platformリリースで、GlideExpressionスクリプトに不完全な入力検証リストが含まれています。攻撃者は認証されていない状態でこの脆弱性を利用できます。\n・公式の対象表：ServiceNow / Now Platform。影響ありとして記載：Utah Patch 10 Hot Fix 3未満の版。影響ありとして記載：Utah Patch 10a Hot Fix 2未満の版。影響ありとして記載：Utah Patch 10b Hot Fix 1未満の版。影響ありとして記載：Vancouver Patch 6 Hot Fix 2未満の版。影響ありとして記載：Vancouver Patch 7 Hot Fix 3b未満の版。影響ありとして記載：Vancouver Patch 8 Hot Fix 4未満の版。影響ありとして記載：Vancouver Patch 9 Hot Fix 1未満の版。影響ありとして記載：Vancouver Patch 10未満の版。影響ありとして記載：Washington DC Patch 1 Hot Fix 3b未満の版。影響ありとして記載：Washington DC Patch 2 Hot Fix 2未満の版。影響ありとして記載：Washington DC Patch 3 Hot Fix 2未満の版。影響ありとして記載：Washington DC Patch 4未満の版。影響ありとして記載：Washington DC Patch 5未満の版。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-5217", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:13:26.848Z", "lastSuccess": "2026-10-24T05:13:26.848Z", "sourceCheckedAt": "2026-10-24T05:13:26.848Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2012-4792", "aliases": [], "title": "n/a：コード実行", "summary": "Microsoft Internet Explorer 6 から 8 で、オブジェクトが正しく確保されていないか削除された状態（例: CDwnBindInfo オブジェクト）へのアクセスを引き起こす細工されたウェブサイトを閲覧させることで、リモートの攻撃者が任意のコードを実行できる Use‑after‑free の脆弱性が存在します。", "risk": "攻撃者はこの脆弱性を利用して、対象のコンピュータ上で任意のコードを実行させることができます。", "product": "Microsoft Internet Explorer", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "microsoft", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "対象製品はサポート終了済みであるため、使用中であればネットワークから切断することが推奨されます。", "「CVE-2012-4792」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2012/4xxx/CVE-2012-4792.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-4792", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2012-4792", "label": "CVE公式レコード" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA13-008A.html", "label": "TA13-008A" }, { "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-008", "label": "MS13-008" }, { "url": "http://www.kb.cert.org/vuls/id/154201", "label": "VU#154201" }, { "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ie_cbutton_uaf.rb", "label": "CVE掲載の参考情報" }, { "url": "http://labs.alienvault.com/labs/index.php/2012/just-another-water-hole-campaign-using-an-internet-explorer-0day/", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/119168/Microsoft-Internet-Explorer-CDwnBindInfo-Object-Use-After-Free.html", "label": "CVE掲載の参考情報" }, { "url": "http://eromang.zataz.com/2012/12/29/attack-and-ie-0day-informations-used-against-council-on-foreign-relations/", "label": "CVE掲載の参考情報" }, { "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16361", "label": "oval:org.mitre.oval:def:16361" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA13-015A.html", "label": "TA13-015A" }, { "url": "http://blog.fireeye.com/research/2012/12/council-foreign-relations-water-hole-attack-details.html", "label": "CVE掲載の参考情報" }, { "url": "https://learn.microsoft.com/en-us/lifecycle/products/internet-explorer-11", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4792", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2012-12-30T18:00:00.000Z", "modifiedAt": "2025-10-22T00:05:45.500Z", "fetchedAt": "2026-10-24T06:15:52.760Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2012-4792", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2012/4xxx/CVE-2012-4792.json", "fetchedAt": "2026-10-24T06:15:52.760Z", "publishedAt": "2012-12-30T18:00:00.000Z", "modifiedAt": "2025-10-22T00:05:45.500Z", "state": "published", "provider": "microsoft", "title": "", "descriptions": [ { "lang": "en", "value": "Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Microsoft Internet Explorer contains a use-after-free vulnerability that allows a remote attacker to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-4792", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "http://www.us-cert.gov/cas/techalerts/TA13-008A.html", "label": "TA13-008A", "tags": [ "third-party-advisory", "x_refsource_CERT", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-008", "label": "MS13-008", "tags": [ "vendor-advisory", "x_refsource_MS", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "http://www.kb.cert.org/vuls/id/154201", "label": "VU#154201", "tags": [ "third-party-advisory", "x_refsource_CERT-VN", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" }, { "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ie_cbutton_uaf.rb", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/3" }, { "url": "http://labs.alienvault.com/labs/index.php/2012/just-another-water-hole-campaign-using-an-internet-explorer-0day/", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/4" }, { "url": "http://packetstormsecurity.com/files/119168/Microsoft-Internet-Explorer-CDwnBindInfo-Object-Use-After-Free.html", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/5" }, { "url": "http://eromang.zataz.com/2012/12/29/attack-and-ie-0day-informations-used-against-council-on-foreign-relations/", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/6" }, { "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16361", "label": "oval:org.mitre.oval:def:16361", "tags": [ "vdb-entry", "signature", "x_refsource_OVAL", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/7" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA13-015A.html", "label": "TA13-015A", "tags": [ "third-party-advisory", "x_refsource_CERT", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/8" }, { "url": "http://blog.fireeye.com/research/2012/12/council-foreign-relations-water-hole-attack-details.html", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/9" }, { "url": "http://blogs.technet.com/b/srd/archive/2012/12/29/new-vulnerability-affecting-internet-explorer-8-users.aspx", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/10" }, { "url": "http://technet.microsoft.com/security/advisory/2794220", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/11" }, { "url": "http://blogs.technet.com/b/srd/archive/2012/12/31/microsoft-quot-fix-it-quot-available-for-internet-explorer-6-7-and-8.aspx", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/12" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-4792", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2012/4xxx/CVE-2012-4792.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2012/4xxx/CVE-2012-4792.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2012/4xxx/CVE-2012-4792.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"n/a\",\"lang\":\"en\",\"type\":\"text\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2012/4xxx/CVE-2012-4792.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2012-4792:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-4792", "sourcePath": "retained:/originalText", "text": "Microsoft Internet Explorer contains a use-after-free vulnerability that allows a remote attacker to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2012-4792:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-4792", "sourcePath": "retained:/sourceAction", "text": "The impacted product is end-of-life and should be disconnected if still in use.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-4792", "modifiedAt": "2024-07-23T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-22T00:05:45.500Z", "fetchedAt": "2026-10-24T06:15:52.760Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-07-23T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "state": "published" } ], "sourceAction": "The impacted product is end-of-life and should be disconnected if still in use.", "sourceSummary": "n/aにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T06:15:52.760Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "5181830d93fc5abb22b2e86ec1d60548576a0e6ba786d620eca4ab29bb8076a6", "sourceModifiedAt": "2025-10-22T00:05:45.500Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Microsoft Internet Explorer 6 から 8 で、オブジェクトが正しく確保されていないか削除された状態（例: CDwnBindInfo オブジェクト）へのアクセスを引き起こす細工されたウェブサイトを閲覧させることで、リモートの攻撃者が任意のコードを実行できる Use‑after‑free の脆弱性が存在します。", "risk": "攻撃者はこの脆弱性を利用して、対象のコンピュータ上で任意のコードを実行させることができます。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "リモートの攻撃者が、Microsoft Internet Explorer 6‑8 を使用している環境で、オブジェクトが正しく確保されていないか削除された状態になるように細工されたウェブサイトにアクセスすること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2012/4xxx/CVE-2012-4792.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2012/4xxx/CVE-2012-4792.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-4792" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2012/4xxx/CVE-2012-4792.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Microsoft Internet Explorer」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2012-4792", "http://www.us-cert.gov/cas/techalerts/TA13-008A.html", "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-008", "http://www.kb.cert.org/vuls/id/154201", "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ie_cbutton_uaf.rb", "http://labs.alienvault.com/labs/index.php/2012/just-another-water-hole-campaign-using-an-internet-explorer-0day/", "http://packetstormsecurity.com/files/119168/Microsoft-Internet-Explorer-CDwnBindInfo-Object-Use-After-Free.html", "http://eromang.zataz.com/2012/12/29/attack-and-ie-0day-informations-used-against-council-on-foreign-relations/", "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16361", "http://www.us-cert.gov/cas/techalerts/TA13-015A.html", "http://blog.fireeye.com/research/2012/12/council-foreign-relations-water-hole-attack-details.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-4792", "https://learn.microsoft.com/en-us/lifecycle/products/internet-explorer-11", "https://nvd.nist.gov/vuln/detail/CVE-2012-4792" ] } ], "actions": [ { "text": "対象製品はサポート終了済みであるため、使用中であればネットワークから切断することが推奨されます。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-4792" ], "evidenceIds": [ "E4" ] }, { "text": "「CVE-2012-4792」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2012-4792", "http://www.us-cert.gov/cas/techalerts/TA13-008A.html", "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-008", "http://www.kb.cert.org/vuls/id/154201", "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ie_cbutton_uaf.rb", "http://labs.alienvault.com/labs/index.php/2012/just-another-water-hole-campaign-using-an-internet-explorer-0day/", "http://packetstormsecurity.com/files/119168/Microsoft-Internet-Explorer-CDwnBindInfo-Object-Use-After-Free.html", "http://eromang.zataz.com/2012/12/29/attack-and-ie-0day-informations-used-against-council-on-foreign-relations/", "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16361", "http://www.us-cert.gov/cas/techalerts/TA13-015A.html", "http://blog.fireeye.com/research/2012/12/council-foreign-relations-water-hole-attack-details.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-4792", "https://learn.microsoft.com/en-us/lifecycle/products/internet-explorer-11", "https://nvd.nist.gov/vuln/detail/CVE-2012-4792" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2012-4792", "http://www.us-cert.gov/cas/techalerts/TA13-008A.html", "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-008", "http://www.kb.cert.org/vuls/id/154201", "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ie_cbutton_uaf.rb", "http://labs.alienvault.com/labs/index.php/2012/just-another-water-hole-campaign-using-an-internet-explorer-0day/", "http://packetstormsecurity.com/files/119168/Microsoft-Internet-Explorer-CDwnBindInfo-Object-Use-After-Free.html", "http://eromang.zataz.com/2012/12/29/attack-and-ie-0day-informations-used-against-council-on-foreign-relations/", "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16361", "http://www.us-cert.gov/cas/techalerts/TA13-015A.html", "http://blog.fireeye.com/research/2012/12/council-foreign-relations-water-hole-attack-details.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-4792", "https://learn.microsoft.com/en-us/lifecycle/products/internet-explorer-11", "https://nvd.nist.gov/vuln/detail/CVE-2012-4792" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2012-4792", "http://www.us-cert.gov/cas/techalerts/TA13-008A.html", "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-008", "http://www.kb.cert.org/vuls/id/154201", "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ie_cbutton_uaf.rb", "http://labs.alienvault.com/labs/index.php/2012/just-another-water-hole-campaign-using-an-internet-explorer-0day/", "http://packetstormsecurity.com/files/119168/Microsoft-Internet-Explorer-CDwnBindInfo-Object-Use-After-Free.html", "http://eromang.zataz.com/2012/12/29/attack-and-ie-0day-informations-used-against-council-on-foreign-relations/", "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16361", "http://www.us-cert.gov/cas/techalerts/TA13-015A.html", "http://blog.fireeye.com/research/2012/12/council-foreign-relations-water-hole-attack-details.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-4792", "https://learn.microsoft.com/en-us/lifecycle/products/internet-explorer-11", "https://nvd.nist.gov/vuln/detail/CVE-2012-4792" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2012/4xxx/CVE-2012-4792.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2012-4792", "http://www.us-cert.gov/cas/techalerts/TA13-008A.html", "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-008", "http://www.kb.cert.org/vuls/id/154201", "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ie_cbutton_uaf.rb", "http://labs.alienvault.com/labs/index.php/2012/just-another-water-hole-campaign-using-an-internet-explorer-0day/", "http://packetstormsecurity.com/files/119168/Microsoft-Internet-Explorer-CDwnBindInfo-Object-Use-After-Free.html", "http://eromang.zataz.com/2012/12/29/attack-and-ie-0day-informations-used-against-council-on-foreign-relations/", "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16361", "http://www.us-cert.gov/cas/techalerts/TA13-015A.html", "http://blog.fireeye.com/research/2012/12/council-foreign-relations-water-hole-attack-details.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-4792", "https://learn.microsoft.com/en-us/lifecycle/products/internet-explorer-11", "https://nvd.nist.gov/vuln/detail/CVE-2012-4792" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2012/4xxx/CVE-2012-4792.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-4792", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2012-4792", "label": "CVE公式レコード" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA13-008A.html", "label": "TA13-008A" }, { "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-008", "label": "MS13-008" }, { "url": "http://www.kb.cert.org/vuls/id/154201", "label": "VU#154201" }, { "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ie_cbutton_uaf.rb", "label": "CVE掲載の参考情報" }, { "url": "http://labs.alienvault.com/labs/index.php/2012/just-another-water-hole-campaign-using-an-internet-explorer-0day/", "label": "CVE掲載の参考情報" }, { "url": "http://packetstormsecurity.com/files/119168/Microsoft-Internet-Explorer-CDwnBindInfo-Object-Use-After-Free.html", "label": "CVE掲載の参考情報" }, { "url": "http://eromang.zataz.com/2012/12/29/attack-and-ie-0day-informations-used-against-council-on-foreign-relations/", "label": "CVE掲載の参考情報" }, { "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16361", "label": "oval:org.mitre.oval:def:16361" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA13-015A.html", "label": "TA13-015A" }, { "url": "http://blog.fireeye.com/research/2012/12/council-foreign-relations-water-hole-attack-details.html", "label": "CVE掲載の参考情報" }, { "url": "https://learn.microsoft.com/en-us/lifecycle/products/internet-explorer-11", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4792", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2012/4xxx/CVE-2012-4792.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-4792", "sourceField": "retained:/originalText", "excerpt": "Microsoft Internet Explorer contains a use-after-free vulnerability that allows a remote attacker to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2012/4xxx/CVE-2012-4792.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-4792", "sourceField": "retained:/sourceAction", "excerpt": "The impacted product is end-of-life and should be disconnected if still in use.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-4792", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2012-4792\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2012-4792（Microsoft Internet Explorer）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・リモートの攻撃者が、Microsoft Internet Explorer 6‑8 を使用している環境で、オブジェクトが正しく確保されていないか削除された状態になるように細工されたウェブサイトにアクセスすること。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2012-4792", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T06:15:52.760Z", "lastSuccess": "2026-10-24T06:15:52.760Z", "sourceCheckedAt": "2026-10-24T06:15:52.760Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2024-39891", "aliases": [], "title": "n/a：脆弱性情報", "summary": "Twilio Authy の API では、Authy Android 25.1.0 未満および Authy iOS 26.1.0 未満で利用されるエンドポイントが認証なしで電話番号を受け取り、その番号が Authy に登録されているかどうかの情報を返します（ただし、Authy アカウント自体は侵害されません）。", "risk": "攻撃者は電話番号が Authy に登録されているかどうかを知ることができ、個人情報の漏洩につながります。", "product": "Twilio Authy", "category": "other", "component": "package", "severity": "medium", "cvss": 5.3, "cvssVersion": "3.1", "cvssSource": "mitre", "cvssVector": "CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:N/S:U/UI:N", "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "「CVE-2024-39891」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/39xxx/CVE-2024-39891.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-39891", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-39891", "label": "CVE公式レコード" }, { "url": "https://cwe.mitre.org/data/definitions/203.html", "label": "CVE掲載の参考情報" }, { "url": "https://www.twilio.com/docs/usage/security/reporting-vulnerabilities", "label": "CVE掲載の参考情報" }, { "url": "https://www.twilio.com/en-us/changelog", "label": "CVE掲載の参考情報" }, { "url": "https://www.bleepingcomputer.com/news/security/hackers-abused-api-to-verify-millions-of-authy-mfa-phone-numbers/", "label": "CVE掲載の参考情報" }, { "url": "https://www.twilio.com/en-us/changelog/Security_Alert_Authy_App_Android_iOS", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-39891", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-07-02T00:00:00.000Z", "modifiedAt": "2025-10-21T22:55:50.240Z", "fetchedAt": "2026-10-24T05:13:40.902Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoint provided access to certain phone-number data, as exploited in the wild in June 2024. Specifically, the endpoint accepted a stream of requests containing phone numbers, and responded with information about whether each phone number was registered with Authy. (Authy accounts were not compromised, however.)", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "n/a", "product": "n/a", "versions": [ { "version": "n/a", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-39891", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/39xxx/CVE-2024-39891.json", "fetchedAt": "2026-10-24T05:13:40.902Z", "publishedAt": "2024-07-02T00:00:00.000Z", "modifiedAt": "2025-10-21T22:55:50.240Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoint provided access to certain phone-number data, as exploited in the wild in June 2024. Specifically, the endpoint accepted a stream of requests containing phone numbers, and responded with information about whether each phone number was registered with Authy. (Authy accounts were not compromised, however.)", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Twilio Authy contains an information disclosure vulnerability in its API that allows an unauthenticated endpoint to accept a request containing a phone number and respond with information about whether the phone number was registered with Authy.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-39891", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:N/S:U/UI:N", "baseScore": 5.3, "baseSeverity": "MEDIUM", "provider": "mitre", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://cwe.mitre.org/data/definitions/203.html", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.twilio.com/docs/usage/security/reporting-vulnerabilities", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://www.twilio.com/en-us/changelog", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" }, { "url": "https://www.bleepingcomputer.com/news/security/hackers-abused-api-to-verify-millions-of-authy-mfa-phone-numbers/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/3" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-39891", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/39xxx/CVE-2024-39891.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/39xxx/CVE-2024-39891.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoint provided access to certain phone-number data, as exploited in the wild in June 2024. Specifically, the endpoint accepted a stream of requests containing phone numbers, and responded with information about whether each phone number was registered with Authy. (Authy accounts were not compromised, however.)", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/39xxx/CVE-2024-39891.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"type\":\"text\",\"lang\":\"en\",\"description\":\"n/a\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/39xxx/CVE-2024-39891.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:N/S:U/UI:N\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\",\"baseScore\":5.3,\"baseSeverity\":\"MEDIUM\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-39891:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-39891", "sourcePath": "retained:/originalText", "text": "Twilio Authy contains an information disclosure vulnerability in its API that allows an unauthenticated endpoint to accept a request containing a phone number and respond with information about whether the phone number was registered with Authy.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-39891:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-39891", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-39891", "modifiedAt": "2024-07-23T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T22:55:50.240Z", "fetchedAt": "2026-10-24T05:13:40.902Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-07-23T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "n/aに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:13:40.902Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "047a714463e6d219373dac5a27b149f29ca19b33928a91f0474f70642cce6090", "sourceModifiedAt": "2025-10-21T22:55:50.240Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Twilio Authy の API では、Authy Android 25.1.0 未満および Authy iOS 26.1.0 未満で利用されるエンドポイントが認証なしで電話番号を受け取り、その番号が Authy に登録されているかどうかの情報を返します（ただし、Authy アカウント自体は侵害されません）。", "risk": "攻撃者は電話番号が Authy に登録されているかどうかを知ることができ、個人情報の漏洩につながります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "認証なしで電話番号を含むリクエストを送信できることが前提です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/39xxx/CVE-2024-39891.json" ], "evidenceIds": [ "E1" ] }, { "text": "対象は Authy Android バージョン 25.1.0 未満、または Authy iOS バージョン 26.1.0 未満です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/39xxx/CVE-2024-39891.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/39xxx/CVE-2024-39891.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-39891" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/39xxx/CVE-2024-39891.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Twilio Authy」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-39891", "https://cwe.mitre.org/data/definitions/203.html", "https://www.twilio.com/docs/usage/security/reporting-vulnerabilities", "https://www.twilio.com/en-us/changelog", "https://www.bleepingcomputer.com/news/security/hackers-abused-api-to-verify-millions-of-authy-mfa-phone-numbers/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-39891", "https://www.twilio.com/en-us/changelog/Security_Alert_Authy_App_Android_iOS", "https://nvd.nist.gov/vuln/detail/CVE-2024-39891" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-39891" ], "evidenceIds": [ "E4", "E5" ] }, { "text": "「CVE-2024-39891」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-39891", "https://cwe.mitre.org/data/definitions/203.html", "https://www.twilio.com/docs/usage/security/reporting-vulnerabilities", "https://www.twilio.com/en-us/changelog", "https://www.bleepingcomputer.com/news/security/hackers-abused-api-to-verify-millions-of-authy-mfa-phone-numbers/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-39891", "https://www.twilio.com/en-us/changelog/Security_Alert_Authy_App_Android_iOS", "https://nvd.nist.gov/vuln/detail/CVE-2024-39891" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-39891", "https://cwe.mitre.org/data/definitions/203.html", "https://www.twilio.com/docs/usage/security/reporting-vulnerabilities", "https://www.twilio.com/en-us/changelog", "https://www.bleepingcomputer.com/news/security/hackers-abused-api-to-verify-millions-of-authy-mfa-phone-numbers/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-39891", "https://www.twilio.com/en-us/changelog/Security_Alert_Authy_App_Android_iOS", "https://nvd.nist.gov/vuln/detail/CVE-2024-39891" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-39891", "https://cwe.mitre.org/data/definitions/203.html", "https://www.twilio.com/docs/usage/security/reporting-vulnerabilities", "https://www.twilio.com/en-us/changelog", "https://www.bleepingcomputer.com/news/security/hackers-abused-api-to-verify-millions-of-authy-mfa-phone-numbers/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-39891", "https://www.twilio.com/en-us/changelog/Security_Alert_Authy_App_Android_iOS", "https://nvd.nist.gov/vuln/detail/CVE-2024-39891" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/39xxx/CVE-2024-39891.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-39891", "https://cwe.mitre.org/data/definitions/203.html", "https://www.twilio.com/docs/usage/security/reporting-vulnerabilities", "https://www.twilio.com/en-us/changelog", "https://www.bleepingcomputer.com/news/security/hackers-abused-api-to-verify-millions-of-authy-mfa-phone-numbers/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-39891", "https://www.twilio.com/en-us/changelog/Security_Alert_Authy_App_Android_iOS", "https://nvd.nist.gov/vuln/detail/CVE-2024-39891" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/39xxx/CVE-2024-39891.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-39891", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-39891", "label": "CVE公式レコード" }, { "url": "https://cwe.mitre.org/data/definitions/203.html", "label": "CVE掲載の参考情報" }, { "url": "https://www.twilio.com/docs/usage/security/reporting-vulnerabilities", "label": "CVE掲載の参考情報" }, { "url": "https://www.twilio.com/en-us/changelog", "label": "CVE掲載の参考情報" }, { "url": "https://www.bleepingcomputer.com/news/security/hackers-abused-api-to-verify-millions-of-authy-mfa-phone-numbers/", "label": "CVE掲載の参考情報" }, { "url": "https://www.twilio.com/en-us/changelog/Security_Alert_Authy_App_Android_iOS", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-39891", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/39xxx/CVE-2024-39891.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an unauthenticated endpoint provided access to certain phone-number data, as exploited in the wild in June 2024. Specifically, the endpoint accepted a stream of requests containing phone numbers, and responded with information about whether each phone number was registered with Authy. (Authy accounts were not compromised, however.)", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-39891", "sourceField": "retained:/originalText", "excerpt": "Twilio Authy contains an information disclosure vulnerability in its API that allows an unauthenticated endpoint to accept a request containing a phone number and respond with information about whether the phone number was registered with Authy.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/39xxx/CVE-2024-39891.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-39891", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-39891", "sourceField": "/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-39891", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-39891\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-39891（Twilio Authy）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・認証なしで電話番号を含むリクエストを送信できることが前提です。\n・対象は Authy Android バージョン 25.1.0 未満、または Authy iOS バージョン 26.1.0 未満です。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-39891", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:13:40.902Z", "lastSuccess": "2026-10-24T05:13:40.902Z", "sourceCheckedAt": "2026-10-24T05:13:40.902Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2022-22948", "aliases": [], "title": "VMware vCenter Server and VMware Cloud Foundation：情報の漏えい", "summary": "vCenter Server にファイルの権限設定ミスにより情報漏洩の脆弱性があり、攻撃者が vCenter Server に非管理者権限でアクセスできる場合、機密情報にアクセスできる可能性があります。", "risk": "機密情報が漏洩する恐れがあります。", "product": "VMware vCenter Server and VMware Cloud Foundation", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "vmware", "cvssVector": null, "affected": [ { "product": "VMware vCenter Server and VMware Cloud Foundation", "range": "VMware vCenter Server (7.0 prior to 7.0 U3d, 6.7 prior to 6.7 U3p and 6.5 prior to 6.5 U3r) and VMware Cloud Foundation (4.x and 3.x prior to 3.11)" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "「CVE-2022-22948」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22948.json", "label": "CVE：vmware" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22948", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2022-22948", "label": "CVE公式レコード" }, { "url": "https://www.vmware.com/security/advisories/VMSA-2022-0009.html", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22948", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2022-03-29T17:24:33.000Z", "modifiedAt": "2025-10-21T23:15:43.268Z", "fetchedAt": "2026-10-24T05:13:42.834Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "VMware vCenter Server and VMware Cloud Foundation", "vendor": "n/a", "versions": [ { "status": "affected", "version": "VMware vCenter Server (7.0 prior to 7.0 U3d, 6.7 prior to 6.7 U3p and 6.5 prior to 6.5 U3r) and VMware Cloud Foundation (4.x and 3.x prior to 3.11)" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2022-22948", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22948.json", "fetchedAt": "2026-10-24T05:13:42.834Z", "publishedAt": "2022-03-29T17:24:33.000Z", "modifiedAt": "2025-10-21T23:15:43.268Z", "state": "published", "provider": "vmware", "title": "", "descriptions": [ { "lang": "en", "value": "The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "VMware vCenter Server contains an incorrect default file permissions vulnerability that allows a remote, privileged attacker to gain access to sensitive information.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22948", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "n/a", "product": "VMware vCenter Server and VMware Cloud Foundation", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "VMware vCenter Server (7.0 prior to 7.0 U3d, 6.7 prior to 6.7 U3p and 6.5 prior to 6.5 U3r) and VMware Cloud Foundation (4.x and 3.x prior to 3.11)", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "Information disclosure vulnerability", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.vmware.com/security/advisories/VMSA-2022-0009.html", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22948", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22948.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"VMware vCenter Server and VMware Cloud Foundation\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"VMware vCenter Server (7.0 prior to 7.0 U3d, 6.7 prior to 6.7 U3p and 6.5 prior to 6.5 U3r) and VMware Cloud Foundation (4.x and 3.x prior to 3.11)\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22948.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22948.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"Information disclosure vulnerability\",\"lang\":\"en\",\"type\":\"text\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22948.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":6.5,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"MEDIUM\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\",\"integrityImpact\":\"NONE\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"NONE\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2022-22948:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22948", "sourcePath": "retained:/originalText", "text": "VMware vCenter Server contains an incorrect default file permissions vulnerability that allows a remote, privileged attacker to gain access to sensitive information.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2022-22948:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22948", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22948", "modifiedAt": "2024-07-17T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:15:43.268Z", "fetchedAt": "2026-10-24T05:13:42.834Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-07-17T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "VMware vCenter Server and VMware Cloud Foundationに情報の漏えいに関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "本来公開しない情報を読み取られる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:13:42.834Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "5961b4820c78fb3f55cecf77719db19a66612587714b4149fc328a5cc3ec48ea", "sourceModifiedAt": "2025-10-21T23:15:43.268Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "vCenter Server にファイルの権限設定ミスにより情報漏洩の脆弱性があり、攻撃者が vCenter Server に非管理者権限でアクセスできる場合、機密情報にアクセスできる可能性があります。", "risk": "機密情報が漏洩する恐れがあります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "攻撃者が vCenter Server に非管理者権限でアクセスできることが前提です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22948.json" ], "evidenceIds": [ "E1" ] }, { "text": "攻撃者がリモートで特権を持つ状態であることが前提です。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22948" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22948" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22948.json" ], "evidenceIds": [ "E3" ] }, { "text": "「VMware vCenter Server and VMware Cloud Foundation」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2022-22948", "https://www.vmware.com/security/advisories/VMSA-2022-0009.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22948", "https://nvd.nist.gov/vuln/detail/CVE-2022-22948" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22948" ], "evidenceIds": [ "E4", "E5" ] }, { "text": "「CVE-2022-22948」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2022-22948", "https://www.vmware.com/security/advisories/VMSA-2022-0009.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22948", "https://nvd.nist.gov/vuln/detail/CVE-2022-22948" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2022-22948", "https://www.vmware.com/security/advisories/VMSA-2022-0009.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22948", "https://nvd.nist.gov/vuln/detail/CVE-2022-22948" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2022-22948", "https://www.vmware.com/security/advisories/VMSA-2022-0009.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22948", "https://nvd.nist.gov/vuln/detail/CVE-2022-22948" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22948.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2022-22948", "https://www.vmware.com/security/advisories/VMSA-2022-0009.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22948", "https://nvd.nist.gov/vuln/detail/CVE-2022-22948" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22948.json", "label": "CVE：vmware" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22948", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2022-22948", "label": "CVE公式レコード" }, { "url": "https://www.vmware.com/security/advisories/VMSA-2022-0009.html", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22948", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22948.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22948", "sourceField": "retained:/originalText", "excerpt": "VMware vCenter Server contains an incorrect default file permissions vulnerability that allows a remote, privileged attacker to gain access to sensitive information.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/22xxx/CVE-2022-22948.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"VMware vCenter Server and VMware Cloud Foundation\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"VMware vCenter Server (7.0 prior to 7.0 U3d, 6.7 prior to 6.7 U3p and 6.5 prior to 6.5 U3r) and VMware Cloud Foundation (4.x and 3.x prior to 3.11)\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22948", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22948", "sourceField": "/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-22948", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2022-22948\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2022-22948（VMware vCenter Server and VMware Cloud Foundation）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者が vCenter Server に非管理者権限でアクセスできることが前提です。\n・攻撃者がリモートで特権を持つ状態であることが前提です。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2022-22948", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:13:42.834Z", "lastSuccess": "2026-10-24T05:13:42.834Z", "sourceCheckedAt": "2026-10-24T05:13:42.834Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-28995", "aliases": [], "title": "SolarWinds Serv-U：脆弱性情報", "summary": "SolarWinds Serv‑U は、ディレクトリトラバーサル脆弱性により、攻撃者がホストマシン上の機密ファイルを読み取ることができる状態でした。", "risk": "この脆弱性が悪用されると、攻撃者はホスト上の機密ファイルにアクセスして内容を取得できる。", "product": "SolarWinds Serv-U", "category": "other", "component": "package", "severity": "high", "cvss": 8.6, "cvssVersion": "3.1", "cvssSource": "SolarWinds", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "affected": [ { "product": "SolarWinds Serv-U", "range": "15.4.2 HF 1 and previous versions" }, { "product": "SolarWinds Serv-U", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" } ], "fixed": [], "steps": [ "ベンダーが提供する SolarWinds Serv‑U 15.4.2 HF 2 にできるだけ早くアップグレードする。", "ベンダーの指示に従った緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止する。", "「CVE-2024-28995」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28995.json", "label": "CVE：SolarWinds" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28995", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-28995", "label": "CVE公式レコード" }, { "url": "https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28995", "label": "CVE掲載の参考情報" }, { "url": "https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28995", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28995", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-06-06T09:01:23.314Z", "modifiedAt": "2025-10-21T23:05:16.763Z", "fetchedAt": "2026-10-24T05:13:43.827Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine.", "sourceTitle": "SolarWinds Serv-U L Directory Transversal Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "affected", "product": "SolarWinds Serv-U", "vendor": "SolarWinds", "versions": [ { "status": "affected", "version": "15.4.2 HF 1 and previous versions" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-28995", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28995.json", "fetchedAt": "2026-10-24T05:13:43.827Z", "publishedAt": "2024-06-06T09:01:23.314Z", "modifiedAt": "2025-10-21T23:05:16.763Z", "state": "published", "provider": "SolarWinds", "title": "SolarWinds Serv-U L Directory Transversal Vulnerability", "descriptions": [ { "lang": "en", "value": "SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "SolarWinds Serv-U contains a path traversal vulnerability that allows an attacker access to read sensitive files on the host machine.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28995", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "SolarWinds", "product": "SolarWinds Serv-U", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "15.4.2 HF 1 and previous versions", "status": "affected" } ] } ], "solutions": [ { "lang": "en", "value": "SolarWinds recommends that customers upgrade to SolarWinds Serv-U 15.4.2 HF 2 as soon as it becomes available.", "sourcePath": "/containers/cna/solutions/0/value" } ], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-22", "lang": "en", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "baseScore": 8.6, "baseSeverity": "HIGH", "provider": "SolarWinds", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28995", "label": "CVE", "tags": [ "vendor-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-28995", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28995.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"affected\",\"product\":\"SolarWinds Serv-U\",\"vendor\":\"SolarWinds\",\"versions\":[{\"status\":\"affected\",\"version\":\"15.4.2 HF 1 and previous versions\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28995.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/solutions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28995.json", "sourcePath": "/containers/cna/solutions/0/value", "text": "SolarWinds recommends that customers upgrade to SolarWinds Serv-U 15.4.2 HF 2 as soon as it becomes available.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28995.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-22\",\"description\":\"CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28995.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"NONE\",\"baseScore\":8.6,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"privilegesRequired\":\"NONE\",\"scope\":\"CHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-28995:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28995", "sourcePath": "retained:/originalText", "text": "SolarWinds Serv-U contains a path traversal vulnerability that allows an attacker access to read sensitive files on the host machine.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-28995:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28995", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28995", "modifiedAt": "2024-07-17T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:05:16.763Z", "fetchedAt": "2026-10-24T05:13:43.827Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-07-17T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "SolarWinds Serv-Uに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:13:43.827Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "43b0e1811e7931f23b8d1c43625ce85ba2fde3380029c482ea6500a8ffcfcae5", "sourceModifiedAt": "2025-10-21T23:05:16.763Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "SolarWinds Serv‑U は、ディレクトリトラバーサル脆弱性により、攻撃者がホストマシン上の機密ファイルを読み取ることができる状態でした。", "risk": "この脆弱性が悪用されると、攻撃者はホスト上の機密ファイルにアクセスして内容を取得できる。", "summaryEvidenceIds": [ "E1", "E2", "E3" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "公式の対象表：SolarWinds / SolarWinds Serv-U。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28995.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28995" ], "evidenceIds": [ "E7" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28995.json" ], "evidenceIds": [ "E4" ] }, { "text": "「SolarWinds Serv-U」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-28995", "https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28995", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28995", "https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28995", "https://nvd.nist.gov/vuln/detail/CVE-2024-28995" ] } ], "actions": [ { "text": "ベンダーが提供する SolarWinds Serv‑U 15.4.2 HF 2 にできるだけ早くアップグレードする。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28995.json" ], "evidenceIds": [ "E5" ] }, { "text": "ベンダーの指示に従った緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止する。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28995" ], "evidenceIds": [ "E6" ] }, { "text": "「CVE-2024-28995」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-28995", "https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28995", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28995", "https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28995", "https://nvd.nist.gov/vuln/detail/CVE-2024-28995" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-28995", "https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28995", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28995", "https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28995", "https://nvd.nist.gov/vuln/detail/CVE-2024-28995" ] } ], "temporaryMitigations": [ { "text": "ベンダーの指示に従った緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止する。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28995" ], "evidenceIds": [ "E6" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28995.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-28995", "https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28995", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28995", "https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28995", "https://nvd.nist.gov/vuln/detail/CVE-2024-28995" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28995.json", "label": "CVE：SolarWinds" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28995", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-28995", "label": "CVE公式レコード" }, { "url": "https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28995", "label": "CVE掲載の参考情報" }, { "url": "https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28995", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28995", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28995.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28995", "sourceField": "retained:/originalText", "excerpt": "SolarWinds Serv-U contains a path traversal vulnerability that allows an attacker access to read sensitive files on the host machine.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28995.json", "sourceField": "/containers/cna/title", "excerpt": "SolarWinds Serv-U L Directory Transversal Vulnerability", "language": null }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28995.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"affected\",\"product\":\"SolarWinds Serv-U\",\"vendor\":\"SolarWinds\",\"versions\":[{\"status\":\"affected\",\"version\":\"15.4.2 HF 1 and previous versions\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/28xxx/CVE-2024-28995.json", "sourceField": "/containers/cna/solutions/0/value", "excerpt": "SolarWinds recommends that customers upgrade to SolarWinds Serv-U 15.4.2 HF 2 as soon as it becomes available.", "language": "en", "representation": "source_excerpt" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28995", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E7", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-28995", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-28995\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-28995（SolarWinds Serv-U）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：SolarWinds / SolarWinds Serv-U。個別に例外が記されていない版も、原資料では影響ありとされています。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-28995", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:13:43.827Z", "lastSuccess": "2026-10-24T05:13:43.827Z", "sourceCheckedAt": "2026-10-24T05:13:43.827Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-34102", "aliases": [], "title": "Adobe Commerce：コード実行", "summary": "Adobe Commerce バージョン 2.4.7、2.4.6-p5、2.4.5-p7、2.4.4-p8 以前は、XML 外部エンティティ参照の不適切な制限（XXE）脆弱性により、任意のコード実行が可能になる可能性があります。攻撃者は外部エンティティを参照するように細工した XML 文書を送信することでこの脆弱性を悪用でき、利用者の操作は不要です。", "risk": "リモートコード実行が可能になる", "product": "Adobe Commerce", "category": "other", "component": "package", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.1", "cvssSource": "adobe", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "Adobe Commerce", "range": "<= 2.4.4-p8" }, { "product": "Adobe Commerce", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" } ], "fixed": [], "steps": [ "ベンダーの指示に従った緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止する。", "「CVE-2024-34102」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/34xxx/CVE-2024-34102.json", "label": "CVE：adobe" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-34102", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-34102", "label": "CVE公式レコード" }, { "url": "https://helpx.adobe.com/security/products/magento/apsb24-40.html", "label": "CISAが示す関連情報" }, { "url": "https://www.vicarius.io/vsociety/posts/cosmicsting-critical-unauthenticated-xxe-vulnerability-in-adobe-commerce-and-magento-cve-2024-34102", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34102", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-06-13T09:04:56.093Z", "modifiedAt": "2025-10-21T22:56:22.223Z", "fetchedAt": "2026-10-24T08:11:45.350Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by sending a crafted XML document that references external entities. Exploitation of this issue does not require user interaction.", "sourceTitle": "XXE can expose crypt key and other secrets granting full admin access", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "affected", "product": "Adobe Commerce", "vendor": "Adobe", "versions": [ { "lessThanOrEqual": "2.4.4-p8", "status": "affected", "version": "0", "versionType": "semver" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-34102", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/34xxx/CVE-2024-34102.json", "fetchedAt": "2026-10-24T08:11:45.350Z", "publishedAt": "2024-06-13T09:04:56.093Z", "modifiedAt": "2025-10-21T22:56:22.223Z", "state": "published", "provider": "adobe", "title": "XXE can expose crypt key and other secrets granting full admin access", "descriptions": [ { "lang": "en", "value": "Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by sending a crafted XML document that references external entities. Exploitation of this issue does not require user interaction.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for remote code execution.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-34102", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Adobe", "product": "Adobe Commerce", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThanOrEqual": "2.4.4-p8", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-611", "lang": "en", "description": "Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "adobe", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://helpx.adobe.com/security/products/magento/apsb24-40.html", "label": "CVE", "tags": [ "vendor-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.vicarius.io/vsociety/posts/cosmicsting-critical-unauthenticated-xxe-vulnerability-in-adobe-commerce-and-magento-cve-2024-34102", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-34102", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/34xxx/CVE-2024-34102.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"affected\",\"product\":\"Adobe Commerce\",\"vendor\":\"Adobe\",\"versions\":[{\"lessThanOrEqual\":\"2.4.4-p8\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/34xxx/CVE-2024-34102.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by sending a crafted XML document that references external entities. Exploitation of this issue does not require user interaction.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/34xxx/CVE-2024-34102.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-611\",\"description\":\"Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/34xxx/CVE-2024-34102.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"availabilityRequirement\":\"NOT_DEFINED\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"environmentalScore\":9.8,\"environmentalSeverity\":\"CRITICAL\",\"exploitCodeMaturity\":\"NOT_DEFINED\",\"integrityImpact\":\"HIGH\",\"integrityRequirement\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"LOW\",\"modifiedAttackVector\":\"NETWORK\",\"modifiedAvailabilityImpact\":\"HIGH\",\"modifiedConfidentialityImpact\":\"HIGH\",\"modifiedIntegrityImpact\":\"HIGH\",\"modifiedPrivilegesRequired\":\"NONE\",\"modifiedScope\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NONE\",\"privilegesRequired\":\"NONE\",\"remediationLevel\":\"NOT_DEFINED\",\"reportConfidence\":\"NOT_DEFINED\",\"scope\":\"UNCHANGED\",\"temporalScore\":9.8,\"temporalSeverity\":\"CRITICAL\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-34102:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-34102", "sourcePath": "retained:/originalText", "text": "Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for remote code execution.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-34102:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-34102", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-34102", "modifiedAt": "2024-07-17T00:00:00.000Z", "fetchedAt": "2026-10-24T07:17:50.339Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T22:56:22.223Z", "fetchedAt": "2026-10-24T08:11:45.350Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-07-17T00:00:00.000Z", "fetchedAt": "2026-10-24T07:17:50.339Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Adobe Commerceにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T08:11:45.350Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "c858b0c83decf489635b2fac369a6f8ccdb7485dce3bb711d5a0c0abde673ad9", "sourceModifiedAt": "2025-10-21T22:56:22.223Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Adobe Commerce バージョン 2.4.7、2.4.6-p5、2.4.5-p7、2.4.4-p8 以前は、XML 外部エンティティ参照の不適切な制限（XXE）脆弱性により、任意のコード実行が可能になる可能性があります。攻撃者は外部エンティティを参照するように細工した XML 文書を送信することでこの脆弱性を悪用でき、利用者の操作は不要です。", "risk": "リモートコード実行が可能になる", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E3" ], "applicability": [ { "text": "攻撃者が外部エンティティを参照した細工された XML 文書を送信できること", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/34xxx/CVE-2024-34102.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "利用者の操作は不要であること", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/34xxx/CVE-2024-34102.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Adobe / Adobe Commerce。影響ありとして記載：2.4.4-p8以下の版。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/34xxx/CVE-2024-34102.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-34102" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/34xxx/CVE-2024-34102.json" ], "evidenceIds": [ "E4" ] }, { "text": "「Adobe Commerce」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-34102", "https://helpx.adobe.com/security/products/magento/apsb24-40.html", "https://www.vicarius.io/vsociety/posts/cosmicsting-critical-unauthenticated-xxe-vulnerability-in-adobe-commerce-and-magento-cve-2024-34102", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-34102", "https://nvd.nist.gov/vuln/detail/CVE-2024-34102" ] } ], "actions": [ { "text": "ベンダーの指示に従った緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止する。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-34102" ], "evidenceIds": [ "E5" ] }, { "text": "「CVE-2024-34102」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-34102", "https://helpx.adobe.com/security/products/magento/apsb24-40.html", "https://www.vicarius.io/vsociety/posts/cosmicsting-critical-unauthenticated-xxe-vulnerability-in-adobe-commerce-and-magento-cve-2024-34102", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-34102", "https://nvd.nist.gov/vuln/detail/CVE-2024-34102" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-34102", "https://helpx.adobe.com/security/products/magento/apsb24-40.html", "https://www.vicarius.io/vsociety/posts/cosmicsting-critical-unauthenticated-xxe-vulnerability-in-adobe-commerce-and-magento-cve-2024-34102", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-34102", "https://nvd.nist.gov/vuln/detail/CVE-2024-34102" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-34102", "https://helpx.adobe.com/security/products/magento/apsb24-40.html", "https://www.vicarius.io/vsociety/posts/cosmicsting-critical-unauthenticated-xxe-vulnerability-in-adobe-commerce-and-magento-cve-2024-34102", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-34102", "https://nvd.nist.gov/vuln/detail/CVE-2024-34102" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/34xxx/CVE-2024-34102.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-34102", "https://helpx.adobe.com/security/products/magento/apsb24-40.html", "https://www.vicarius.io/vsociety/posts/cosmicsting-critical-unauthenticated-xxe-vulnerability-in-adobe-commerce-and-magento-cve-2024-34102", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-34102", "https://nvd.nist.gov/vuln/detail/CVE-2024-34102" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/34xxx/CVE-2024-34102.json", "label": "CVE：adobe" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-34102", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-34102", "label": "CVE公式レコード" }, { "url": "https://helpx.adobe.com/security/products/magento/apsb24-40.html", "label": "CISAが示す関連情報" }, { "url": "https://www.vicarius.io/vsociety/posts/cosmicsting-critical-unauthenticated-xxe-vulnerability-in-adobe-commerce-and-magento-cve-2024-34102", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34102", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/34xxx/CVE-2024-34102.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by sending a crafted XML document that references external entities. Exploitation of this issue does not require user interaction.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/34xxx/CVE-2024-34102.json", "sourceField": "/containers/cna/title", "excerpt": "XXE can expose crypt key and other secrets granting full admin access", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-34102", "sourceField": "retained:/originalText", "excerpt": "Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for remote code execution.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/34xxx/CVE-2024-34102.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"affected\",\"product\":\"Adobe Commerce\",\"vendor\":\"Adobe\",\"versions\":[{\"lessThanOrEqual\":\"2.4.4-p8\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-34102", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-34102", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-34102\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-34102（Adobe Commerce）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者が外部エンティティを参照した細工された XML 文書を送信できること\n・利用者の操作は不要であること\n・公式の対象表：Adobe / Adobe Commerce。影響ありとして記載：2.4.4-p8以下の版。個別に例外が記されていない版も、原資料では影響ありとされています。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-34102", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T08:11:45.350Z", "lastSuccess": "2026-10-24T08:11:45.350Z", "sourceCheckedAt": "2026-10-24T08:11:45.350Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2024-36401", "aliases": [], "title": "geoserver：コード実行", "summary": "GeoServer のデフォルトインストールにおいて、プロパティ名を XPath 式として安全でない方法で評価するため、認証されていないユーザーが特別に細工した入力を送るとリモートでコードを実行できる脆弱性が存在します。", "risk": "この脆弱性が悪用されると、攻撃者は任意のコードを実行させることができ、サーバー上で自由にプログラムを動かすことが可能になります。", "product": "geoserver", "category": "other", "component": "package", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.1", "cvssSource": "GitHub_M", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "geoserver", "range": ">= 2.23.0, < 2.23.6" }, { "product": "geoserver", "range": ">= 2.24.0, < 2.24.4" }, { "product": "geoserver", "range": ">= 2.25.0, < 2.25.2" }, { "product": "geoserver", "range": "< 2.22.6" } ], "fixed": [], "steps": [ "バージョン 2.22.6、2.23.6、2.24.4、2.25.2 以降にパッチが適用されています。該当バージョンにアップデートしてください。", "回避策として、GeoServer の gt-complex-x.y.jar（例: gt-complex-31.1.jar）を削除すると脆弱なコードが除去されますが、機能が一部失われる可能性があります。", "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "「CVE-2024-36401」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36401.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-36401", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-36401", "label": "CVE公式レコード" }, { "url": "https://github.com/geoserver/geoserver/security/advisories/GHSA-6jj6-gm7p-fcvv", "label": "CISAが示す関連情報" }, { "url": "https://github.com/geotools/geotools/security/advisories/GHSA-w3pj-wh35-fq8w", "label": "https://github.com/geotools/geotools/security/advisories/GHSA-w3pj-wh35-fq8w" }, { "url": "https://github.com/geotools/geotools/pull/4797", "label": "CISAが示す関連情報" }, { "url": "https://github.com/Warxim/CVE-2022-41852?tab=readme-ov-file#workaround-for-cve-2022-41852", "label": "https://github.com/Warxim/CVE-2022-41852?tab=readme-ov-file#workaround-for-cve-2022-41852" }, { "url": "https://osgeo-org.atlassian.net/browse/GEOT-7587", "label": "https://osgeo-org.atlassian.net/browse/GEOT-7587" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-36401", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-07-01T15:25:41.873Z", "modifiedAt": "2025-10-21T22:56:21.450Z", "fetchedAt": "2026-10-24T05:13:54.361Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.22.6, 2.23.6, 2.24.4, and 2.25.2, multiple OGC request parameters allow Remote Code Execution (RCE) by unauthenticated users through specially crafted input against a default GeoServer installation due to unsafely evaluating property names as XPath expressions.\n\nThe GeoTools library API that GeoServer calls evaluates property/attribute names for feature types in a way that unsafely passes them to the commons-jxpath library which can execute arbitrary code when evaluating XPath expressions. This XPath evaluation is intended to be used only by complex feature types (i.e., Application Schema data stores) but is incorrectly being applied to simple feature types as well which makes this vulnerability apply to **ALL** GeoServer instances. No public PoC is provided but this vulnerability has been confirmed to be exploitable through WFS GetFeature, WFS GetPropertyValue, WMS GetMap, WMS GetFeatureInfo, WMS GetLegendGraphic and WPS Execute requests. This vulnerability can lead to executing arbitrary code.\n\nVersions 2.22.6, 2.23.6, 2.24.4, and 2.25.2 contain a patch for the issue. A workaround exists by removing the `gt-complex-x.y.jar` file from the GeoServer where `x.y` is the GeoTools version (e.g., `gt-complex-31.1.jar` if running GeoServer 2.25.1). This will remove the vulnerable code from GeoServer but may break some GeoServer functionality or prevent GeoServer from deploying if the gt-complex module is needed.", "sourceTitle": "Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "geoserver", "product": "geoserver", "versions": [ { "version": ">= 2.23.0, < 2.23.6", "status": "affected" }, { "version": ">= 2.24.0, < 2.24.4", "status": "affected" }, { "version": ">= 2.25.0, < 2.25.2", "status": "affected" }, { "version": "< 2.22.6", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-36401", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36401.json", "fetchedAt": "2026-10-24T05:13:54.361Z", "publishedAt": "2024-07-01T15:25:41.873Z", "modifiedAt": "2025-10-21T22:56:21.450Z", "state": "published", "provider": "GitHub_M", "title": "Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver", "descriptions": [ { "lang": "en", "value": "GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.22.6, 2.23.6, 2.24.4, and 2.25.2, multiple OGC request parameters allow Remote Code Execution (RCE) by unauthenticated users through specially crafted input against a default GeoServer installation due to unsafely evaluating property names as XPath expressions.\n\nThe GeoTools library API that GeoServer calls evaluates property/attribute names for feature types in a way that unsafely passes them to the commons-jxpath library which can execute arbitrary code when evaluating XPath expressions. This XPath evaluation is intended to be used only by complex feature types (i.e., Application Schema data stores) but is incorrectly being applied to simple feature types as well which makes this vulnerability apply to **ALL** GeoServer instances. No public PoC is provided but this vulnerability has been confirmed to be exploitable through WFS GetFeature, WFS GetPropertyValue, WMS GetMap, WMS GetFeatureInfo, WMS GetLegendGraphic and WPS Execute requests. This vulnerability can lead to executing arbitrary code.\n\nVersions 2.22.6, 2.23.6, 2.24.4, and 2.25.2 contain a patch for the issue. A workaround exists by removing the `gt-complex-x.y.jar` file from the GeoServer where `x.y` is the GeoTools version (e.g., `gt-complex-31.1.jar` if running GeoServer 2.25.1). This will remove the vulnerable code from GeoServer but may break some GeoServer functionality or prevent GeoServer from deploying if the gt-complex module is needed.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "OSGeo GeoServer GeoTools contains an improper neutralization of directives in dynamically evaluated code vulnerability due to unsafely evaluating property names as XPath expressions. This allows unauthenticated attackers to conduct remote code execution via specially crafted input.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-36401", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "geoserver", "product": "geoserver", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": ">= 2.23.0, < 2.23.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": ">= 2.24.0, < 2.24.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": ">= 2.25.0, < 2.25.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "< 2.22.6", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-95", "lang": "en", "description": "CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "GitHub_M", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://github.com/geoserver/geoserver/security/advisories/GHSA-6jj6-gm7p-fcvv", "label": "https://github.com/geoserver/geoserver/security/advisories/GHSA-6jj6-gm7p-fcvv", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://github.com/geotools/geotools/security/advisories/GHSA-w3pj-wh35-fq8w", "label": "https://github.com/geotools/geotools/security/advisories/GHSA-w3pj-wh35-fq8w", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://github.com/geotools/geotools/pull/4797", "label": "https://github.com/geotools/geotools/pull/4797", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" }, { "url": "https://github.com/Warxim/CVE-2022-41852?tab=readme-ov-file#workaround-for-cve-2022-41852", "label": "https://github.com/Warxim/CVE-2022-41852?tab=readme-ov-file#workaround-for-cve-2022-41852", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/3" }, { "url": "https://osgeo-org.atlassian.net/browse/GEOT-7587", "label": "https://osgeo-org.atlassian.net/browse/GEOT-7587", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/4" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-36401", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.vicarius.io/vsociety/posts/geoserver-rce-cve-2024-36401", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/5" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36401.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"geoserver\",\"product\":\"geoserver\",\"versions\":[{\"version\":\">= 2.23.0, < 2.23.6\",\"status\":\"affected\"},{\"version\":\">= 2.24.0, < 2.24.4\",\"status\":\"affected\"},{\"version\":\">= 2.25.0, < 2.25.2\",\"status\":\"affected\"},{\"version\":\"< 2.22.6\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36401.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.22.6, 2.23.6, 2.24.4, and 2.25.2, multiple OGC request parameters allow Remote Code Execution (RCE) by unauthenticated users through specially crafted input against a default GeoServer installation due to unsafely evaluating property names as XPath expressions.\n\nThe GeoTools library API that GeoServer calls evaluates property/attribute names for feature types in a way that unsafely passes them to the commons-jxpath library which can execute arbitrary code when evaluating XPath expressions. This XPath evaluation is intended to be used only by complex feature types (i.e., Application Schema data stores) but is incorrectly being applied to simple feature types as well which makes this vulnerability apply to **ALL** GeoServer instances. No public PoC is provided but this vulnerability has been confirmed to be exploitable through WFS GetFeature, WFS GetPropertyValue, WMS GetMap, WMS GetFeatureInfo, WMS GetLegendGraphic and WPS Execute requests. This vulnerability can lead to executing arbitrary code.\n\nVersions 2.22.6, 2.23.6, 2.24.4, and 2.25.2 contain a patch for the issue. A workaround exists by removing the `gt-complex-x.y.jar` file from the GeoServer where `x.y` is the GeoTools version (e.g., `gt-complex-31.1.jar` if running GeoServer 2.25.1). This will remove the vulnerable code from GeoServer but may break some GeoServer functionality or prevent GeoServer from deploying if the gt-complex module is needed.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36401.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-95\",\"lang\":\"en\",\"description\":\"CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36401.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-36401:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-36401", "sourcePath": "retained:/originalText", "text": "OSGeo GeoServer GeoTools contains an improper neutralization of directives in dynamically evaluated code vulnerability due to unsafely evaluating property names as XPath expressions. This allows unauthenticated attackers to conduct remote code execution via specially crafted input.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-36401:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-36401", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-36401", "modifiedAt": "2024-07-15T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T22:56:21.450Z", "fetchedAt": "2026-10-24T05:13:54.361Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-07-15T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "geoserverにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:13:54.361Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "c04a1e0bba10580cb925f5f20190c5d9e3b8be477a84b0663363b0a3b061d6d8", "sourceModifiedAt": "2025-10-21T22:56:21.450Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "GeoServer のデフォルトインストールにおいて、プロパティ名を XPath 式として安全でない方法で評価するため、認証されていないユーザーが特別に細工した入力を送るとリモートでコードを実行できる脆弱性が存在します。", "risk": "この脆弱性が悪用されると、攻撃者は任意のコードを実行させることができ、サーバー上で自由にプログラムを動かすことが可能になります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "認証されていない攻撃者が利用できること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36401.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "デフォルトの GeoServer インストールが対象であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36401.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "複数の OGC リクエストパラメータ（WFS GetFeature、WFS GetPropertyValue、WMS GetMap、WMS GetFeatureInfo、WMS GetLegendGraphic、WPS Execute）が影響を受けること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36401.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "プロパティ名が XPath 式として評価されることが原因であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36401.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "この評価は本来複雑なフィーチャタイプ（Application Schema データストア）向けであるが、単純なフィーチャタイプにも誤って適用されていること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36401.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "上記の条件に該当するすべての GeoServer インスタンスが影響を受けること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36401.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：geoserver / geoserver。影響ありとして記載：>= 2.23.0, < 2.23.6。影響ありとして記載：>= 2.24.0, < 2.24.4。影響ありとして記載：>= 2.25.0, < 2.25.2。影響ありとして記載：< 2.22.6。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36401.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-36401" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36401.json" ], "evidenceIds": [ "E3" ] }, { "text": "「geoserver」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-36401", "https://github.com/geoserver/geoserver/security/advisories/GHSA-6jj6-gm7p-fcvv", "https://github.com/geotools/geotools/security/advisories/GHSA-w3pj-wh35-fq8w", "https://github.com/geotools/geotools/pull/4797", "https://github.com/Warxim/CVE-2022-41852?tab=readme-ov-file#workaround-for-cve-2022-41852", "https://osgeo-org.atlassian.net/browse/GEOT-7587", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-36401", "https://nvd.nist.gov/vuln/detail/CVE-2024-36401" ] } ], "actions": [ { "text": "バージョン 2.22.6、2.23.6、2.24.4、2.25.2 以降にパッチが適用されています。該当バージョンにアップデートしてください。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36401.json" ], "evidenceIds": [ "E1" ] }, { "text": "回避策として、GeoServer の gt-complex-x.y.jar（例: gt-complex-31.1.jar）を削除すると脆弱なコードが除去されますが、機能が一部失われる可能性があります。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36401.json" ], "evidenceIds": [ "E1" ] }, { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-36401" ], "evidenceIds": [ "E4", "E5" ] }, { "text": "「CVE-2024-36401」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-36401", "https://github.com/geoserver/geoserver/security/advisories/GHSA-6jj6-gm7p-fcvv", "https://github.com/geotools/geotools/security/advisories/GHSA-w3pj-wh35-fq8w", "https://github.com/geotools/geotools/pull/4797", "https://github.com/Warxim/CVE-2022-41852?tab=readme-ov-file#workaround-for-cve-2022-41852", "https://osgeo-org.atlassian.net/browse/GEOT-7587", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-36401", "https://nvd.nist.gov/vuln/detail/CVE-2024-36401" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-36401", "https://github.com/geoserver/geoserver/security/advisories/GHSA-6jj6-gm7p-fcvv", "https://github.com/geotools/geotools/security/advisories/GHSA-w3pj-wh35-fq8w", "https://github.com/geotools/geotools/pull/4797", "https://github.com/Warxim/CVE-2022-41852?tab=readme-ov-file#workaround-for-cve-2022-41852", "https://osgeo-org.atlassian.net/browse/GEOT-7587", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-36401", "https://nvd.nist.gov/vuln/detail/CVE-2024-36401" ] } ], "temporaryMitigations": [ { "text": "gt-complex-x.y.jar ファイルを削除して脆弱なコードを除去します（ただし機能が制限される可能性があります）。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36401.json" ], "evidenceIds": [ "E1" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36401.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-36401", "https://github.com/geoserver/geoserver/security/advisories/GHSA-6jj6-gm7p-fcvv", "https://github.com/geotools/geotools/security/advisories/GHSA-w3pj-wh35-fq8w", "https://github.com/geotools/geotools/pull/4797", "https://github.com/Warxim/CVE-2022-41852?tab=readme-ov-file#workaround-for-cve-2022-41852", "https://osgeo-org.atlassian.net/browse/GEOT-7587", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-36401", "https://nvd.nist.gov/vuln/detail/CVE-2024-36401" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36401.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-36401", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-36401", "label": "CVE公式レコード" }, { "url": "https://github.com/geoserver/geoserver/security/advisories/GHSA-6jj6-gm7p-fcvv", "label": "CISAが示す関連情報" }, { "url": "https://github.com/geotools/geotools/security/advisories/GHSA-w3pj-wh35-fq8w", "label": "https://github.com/geotools/geotools/security/advisories/GHSA-w3pj-wh35-fq8w" }, { "url": "https://github.com/geotools/geotools/pull/4797", "label": "CISAが示す関連情報" }, { "url": "https://github.com/Warxim/CVE-2022-41852?tab=readme-ov-file#workaround-for-cve-2022-41852", "label": "https://github.com/Warxim/CVE-2022-41852?tab=readme-ov-file#workaround-for-cve-2022-41852" }, { "url": "https://osgeo-org.atlassian.net/browse/GEOT-7587", "label": "https://osgeo-org.atlassian.net/browse/GEOT-7587" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-36401", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36401.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.22.6, 2.23.6, 2.24.4, and 2.25.2, multiple OGC request parameters allow Remote Code Execution (RCE) by unauthenticated users through specially crafted input against a default GeoServer installation due to unsafely evaluating property names as XPath expressions.\n\nThe GeoTools library API that GeoServer calls evaluates property/attribute names for feature types in a way that unsafely passes them to the commons-jxpath library which can execute arbitrary code when evaluating XPath expressions. This XPath evaluation is intended to be used only by complex feature types (i.e., Application Schema data stores) but is incorrectly being applied to simple feature types as well which makes this vulnerability apply to **ALL** GeoServer instances. No public PoC is provided but this vulnerability has been confirmed to be exploitable through WFS GetFeature, WFS GetPropertyValue, WMS GetMap, WMS GetFeatureInfo, WMS GetLegendGraphic and WPS Execute requests. This vulnerability can lead to executing arbitrary code.\n\nVersions 2.22.6, 2.23.6, 2.24.4, and 2.25.2 contain a patch for the issue. A workaround exists by removing the `gt-complex-x.y.jar` file from the GeoServer where `x.y` is the GeoTools version (e.g., `gt-complex-31.1.jar` if running GeoServer 2.25.1). This will remove the vulnerable code from GeoServer but may break some GeoServer functionality or prevent GeoServer from deploying if the gt-complex module is needed.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36401.json", "sourceField": "/containers/cna/title", "excerpt": "Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/36xxx/CVE-2024-36401.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"geoserver\",\"product\":\"geoserver\",\"versions\":[{\"version\":\">= 2.23.0, < 2.23.6\",\"status\":\"affected\"},{\"version\":\">= 2.24.0, < 2.24.4\",\"status\":\"affected\"},{\"version\":\">= 2.25.0, < 2.25.2\",\"status\":\"affected\"},{\"version\":\"< 2.22.6\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-36401", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-36401", "sourceField": "/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-36401", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-36401\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-36401（geoserver）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・認証されていない攻撃者が利用できること。\n・デフォルトの GeoServer インストールが対象であること。\n・複数の OGC リクエストパラメータ（WFS GetFeature、WFS GetPropertyValue、WMS GetMap、WMS GetFeatureInfo、WMS GetLegendGraphic、WPS Execute）が影響を受けること。\n・プロパティ名が XPath 式として評価されることが原因であること。\n・この評価は本来複雑なフィーチャタイプ（Application Schema データストア）向けであるが、単純なフィーチャタイプにも誤って適用されていること。\n・上記の条件に該当するすべての GeoServer インスタンスが影響を受けること。\n・公式の対象表：geoserver / geoserver。影響ありとして記載：>= 2.23.0, < 2.23.6。影響ありとして記載：>= 2.24.0, < 2.24.4。影響ありとして記載：>= 2.25.0, < 2.25.2。影響ありとして記載：< 2.22.6。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-36401", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:13:54.361Z", "lastSuccess": "2026-10-24T05:13:54.361Z", "sourceCheckedAt": "2026-10-24T05:13:54.361Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2024-23692", "aliases": [], "title": "HTTP File Server：コード実行", "summary": "Rejetto HTTP File Server はバージョン 2.3m までにテンプレートインジェクションの脆弱性があり、リモートの認証されていない攻撃者が特別に細工した HTTP リクエストを送ることで任意のコマンドを実行できる。CVE の割り当て日時点でこのバージョンはサポートが終了している。", "risk": "リモートの認証されていない攻撃者が特別に細工した HTTP リクエストを送ることで、対象システム上で任意のコマンドを実行できる。", "product": "HTTP File Server", "category": "other", "component": "package", "severity": "critical", "cvss": 9.8, "cvssVersion": "3.1", "cvssSource": "VulnCheck", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "HTTP File Server", "range": "<= 2.3m" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止する。", "「CVE-2024-23692」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23692.json", "label": "CVE：VulnCheck" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23692", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-23692", "label": "CVE公式レコード" }, { "url": "https://vulncheck.com/advisories/rejetto-unauth-rce", "label": "CVE掲載の参考情報" }, { "url": "https://mohemiv.com/all/rejetto-http-file-server-2-3m-unauthenticated-rce/", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/rapid7/metasploit-framework/pull/19240", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/rejetto/hfs?tab=readme-ov-file#installation", "label": "CISAが示す関連情報" }, { "url": "https://www.rejetto.com/hfs/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23692", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-05-31T09:36:28.763Z", "modifiedAt": "2026-08-11T03:55:27.853Z", "fetchedAt": "2026-10-24T05:13:58.013Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. As of the CVE assignment date, Rejetto HFS 2.3m is no longer supported.", "sourceTitle": "Rejetto HTTP File Server 2.3m Unauthenticated RCE", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "product": "HTTP File Server", "vendor": "Rejetto", "versions": [ { "lessThanOrEqual": "2.3m", "status": "affected", "version": "0", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-23692", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23692.json", "fetchedAt": "2026-10-24T05:13:58.013Z", "publishedAt": "2024-05-31T09:36:28.763Z", "modifiedAt": "2026-08-11T03:55:27.853Z", "state": "published", "provider": "VulnCheck", "title": "Rejetto HTTP File Server 2.3m Unauthenticated RCE", "descriptions": [ { "lang": "en", "value": "Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. As of the CVE assignment date, Rejetto HFS 2.3m is no longer supported.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Rejetto HTTP File Server contains an improper neutralization of special elements used in a template engine vulnerability. This allows a remote, unauthenticated attacker to execute commands on the affected system by sending a specially crafted HTTP request.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23692", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Rejetto", "product": "HTTP File Server", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThanOrEqual": "2.3m", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [ { "lang": "en", "value": "Private exploits are known to exist", "sourcePath": "/containers/cna/exploits/0/value" } ], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-1336", "lang": "en", "description": "CWE-1336: Improper Neutralization of Special Elements Used in a Template Engine", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "provider": "VulnCheck", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://vulncheck.com/advisories/rejetto-unauth-rce", "label": "CVE", "tags": [ "third-party-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/3" }, { "url": "https://mohemiv.com/all/rejetto-http-file-server-2-3m-unauthenticated-rce/", "label": "CVE", "tags": [ "third-party-advisory", "technical-description", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/4" }, { "url": "https://github.com/rapid7/metasploit-framework/pull/19240", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/5" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-23692", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.vicarius.io/vsociety/posts/unauthenticated-rce-flaw-in-rejetto-http-file-server-cve-2024-23692", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.vicarius.io/vsociety/posts/cve-2024-23692-detect-rejetto-hfs-vulnerability", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://www.vicarius.io/vsociety/posts/cve-2024-23692-rejetto-hfs-mitigate-vulnerability", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23692.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"HTTP File Server\",\"vendor\":\"Rejetto\",\"versions\":[{\"lessThanOrEqual\":\"2.3m\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23692.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. As of the CVE assignment date, Rejetto HFS 2.3m is no longer supported.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/exploits/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23692.json", "sourcePath": "/containers/cna/exploits/0/value", "text": "Private exploits are known to exist", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23692.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-1336\",\"description\":\"CWE-1336: Improper Neutralization of Special Elements Used in a Template Engine\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23692.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"UNCHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-23692:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23692", "sourcePath": "retained:/originalText", "text": "Rejetto HTTP File Server contains an improper neutralization of special elements used in a template engine vulnerability. This allows a remote, unauthenticated attacker to execute commands on the affected system by sending a specially crafted HTTP request.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-23692:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23692", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23692", "modifiedAt": "2024-07-09T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-11T03:55:27.853Z", "fetchedAt": "2026-10-24T05:13:58.013Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-07-09T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "HTTP File Serverにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:13:58.013Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "ecb2d0f2f85e6b6a04ff967b3124f1f1081a0076f4681d059337e1a6f7b42279", "sourceModifiedAt": "2026-08-11T03:55:27.853Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Rejetto HTTP File Server はバージョン 2.3m までにテンプレートインジェクションの脆弱性があり、リモートの認証されていない攻撃者が特別に細工した HTTP リクエストを送ることで任意のコマンドを実行できる。CVE の割り当て日時点でこのバージョンはサポートが終了している。", "risk": "リモートの認証されていない攻撃者が特別に細工した HTTP リクエストを送ることで、対象システム上で任意のコマンドを実行できる。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E3" ], "applicability": [ { "text": "Rejetto HTTP File Server のバージョン 2.3m までを使用している環境で、攻撃者が認証なしに特別に細工した HTTP リクエストを送信できる場合に本脆弱性が適用される。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23692.json" ], "evidenceIds": [ "E1", "E4", "E2" ] }, { "text": "公式の対象表：Rejetto / HTTP File Server。影響ありとして記載：2.3m以下の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23692.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23692" ], "evidenceIds": [ "E7" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23692.json" ], "evidenceIds": [ "E4" ] }, { "text": "「HTTP File Server」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-23692", "https://vulncheck.com/advisories/rejetto-unauth-rce", "https://mohemiv.com/all/rejetto-http-file-server-2-3m-unauthenticated-rce/", "https://github.com/rapid7/metasploit-framework/pull/19240", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23692", "https://github.com/rejetto/hfs?tab=readme-ov-file#installation", "https://www.rejetto.com/hfs/", "https://nvd.nist.gov/vuln/detail/CVE-2024-23692" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止する。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23692" ], "evidenceIds": [ "E5", "E6" ] }, { "text": "「CVE-2024-23692」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-23692", "https://vulncheck.com/advisories/rejetto-unauth-rce", "https://mohemiv.com/all/rejetto-http-file-server-2-3m-unauthenticated-rce/", "https://github.com/rapid7/metasploit-framework/pull/19240", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23692", "https://github.com/rejetto/hfs?tab=readme-ov-file#installation", "https://www.rejetto.com/hfs/", "https://nvd.nist.gov/vuln/detail/CVE-2024-23692" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-23692", "https://vulncheck.com/advisories/rejetto-unauth-rce", "https://mohemiv.com/all/rejetto-http-file-server-2-3m-unauthenticated-rce/", "https://github.com/rapid7/metasploit-framework/pull/19240", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23692", "https://github.com/rejetto/hfs?tab=readme-ov-file#installation", "https://www.rejetto.com/hfs/", "https://nvd.nist.gov/vuln/detail/CVE-2024-23692" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-23692", "https://vulncheck.com/advisories/rejetto-unauth-rce", "https://mohemiv.com/all/rejetto-http-file-server-2-3m-unauthenticated-rce/", "https://github.com/rapid7/metasploit-framework/pull/19240", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23692", "https://github.com/rejetto/hfs?tab=readme-ov-file#installation", "https://www.rejetto.com/hfs/", "https://nvd.nist.gov/vuln/detail/CVE-2024-23692" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23692.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-23692", "https://vulncheck.com/advisories/rejetto-unauth-rce", "https://mohemiv.com/all/rejetto-http-file-server-2-3m-unauthenticated-rce/", "https://github.com/rapid7/metasploit-framework/pull/19240", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23692", "https://github.com/rejetto/hfs?tab=readme-ov-file#installation", "https://www.rejetto.com/hfs/", "https://nvd.nist.gov/vuln/detail/CVE-2024-23692" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23692.json", "label": "CVE：VulnCheck" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23692", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-23692", "label": "CVE公式レコード" }, { "url": "https://vulncheck.com/advisories/rejetto-unauth-rce", "label": "CVE掲載の参考情報" }, { "url": "https://mohemiv.com/all/rejetto-http-file-server-2-3m-unauthenticated-rce/", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/rapid7/metasploit-framework/pull/19240", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/rejetto/hfs?tab=readme-ov-file#installation", "label": "CISAが示す関連情報" }, { "url": "https://www.rejetto.com/hfs/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23692", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23692.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. As of the CVE assignment date, Rejetto HFS 2.3m is no longer supported.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23692.json", "sourceField": "/containers/cna/title", "excerpt": "Rejetto HTTP File Server 2.3m Unauthenticated RCE", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23692", "sourceField": "retained:/originalText", "excerpt": "Rejetto HTTP File Server contains an improper neutralization of special elements used in a template engine vulnerability. This allows a remote, unauthenticated attacker to execute commands on the affected system by sending a specially crafted HTTP request.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/23xxx/CVE-2024-23692.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"HTTP File Server\",\"vendor\":\"Rejetto\",\"versions\":[{\"lessThanOrEqual\":\"2.3m\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23692", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23692", "sourceField": "/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null }, { "id": "E7", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23692", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-23692\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-23692（HTTP File Server）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Rejetto HTTP File Server のバージョン 2.3m までを使用している環境で、攻撃者が認証なしに特別に細工した HTTP リクエストを送信できる場合に本脆弱性が適用される。\n・公式の対象表：Rejetto / HTTP File Server。影響ありとして記載：2.3m以下の版。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-23692", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:13:58.013Z", "lastSuccess": "2026-10-24T05:13:58.013Z", "sourceCheckedAt": "2026-10-24T05:13:58.013Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-38080", "aliases": [], "title": "Windows Server 2022 / Windows 11 version 21H2 / Windows 11 version 22H2 / Windows 11 version 22H3 / Windows 11 Version 23H2 / Windows Server 2022, 23H2 Edition (Server Core installation)：権限の奪取", "summary": "Windows Hyper-V に特権昇格の脆弱性が存在し、ローカルのユーザー権限を持つ攻撃者が SYSTEM 権限を取得できる可能性があります。", "risk": "攻撃者が SYSTEM 権限を取得すると、システム全体を制御できるようになります。", "product": "Windows Server 2022 / Windows 11 version 21H2 / Windows 11 version 22H2 / Windows 11 version 22H3 / Windows 11 Version 23H2 / Windows Server 2022, 23H2 Edition (Server Core installation)", "category": "windows", "component": "package", "severity": "high", "cvss": 7.8, "cvssVersion": "3.1", "cvssSource": "microsoft", "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "affected": [ { "product": "Windows Server 2022", "range": ">= 10.0.20348.0 / < 10.0.20348.2582（環境: x64-based Systems）" }, { "product": "Windows 11 version 21H2", "range": ">= 10.0.0 / < 10.0.22000.3079（環境: x64-based Systems / ARM64-based Systems）" }, { "product": "Windows 11 version 22H2", "range": ">= 10.0.22621.0 / < 10.0.22621.3880（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 11 version 22H3", "range": ">= 10.0.22631.0 / < 10.0.22631.3880（環境: ARM64-based Systems）" }, { "product": "Windows 11 Version 23H2", "range": ">= 10.0.22631.0 / < 10.0.22631.3880（環境: x64-based Systems）" }, { "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "range": ">= 10.0.25398.0 / < 10.0.25398.1009（環境: x64-based Systems）" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "「CVE-2024-38080」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38080.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38080", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-38080", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38080", "label": "Windows Hyper-V Elevation of Privilege Vulnerability" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38080", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38080", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "publishedAt": "2024-07-09T17:02:34.187Z", "modifiedAt": "2026-02-10T23:34:32.727Z", "fetchedAt": "2026-10-24T05:15:52.594Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "", "sourceTitle": "Windows Hyper-V Elevation of Privilege Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Microsoft", "product": "Windows Server 2022", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.20348.0", "lessThan": "10.0.20348.2582", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 21H2", "platforms": [ "x64-based Systems", "ARM64-based Systems" ], "versions": [ { "version": "10.0.0", "lessThan": "10.0.22000.3079", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H2", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.22621.0", "lessThan": "10.0.22621.3880", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H3", "platforms": [ "ARM64-based Systems" ], "versions": [ { "version": "10.0.22631.0", "lessThan": "10.0.22631.3880", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 23H2", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.22631.0", "lessThan": "10.0.22631.3880", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.25398.0", "lessThan": "10.0.25398.1009", "versionType": "custom", "status": "affected" } ] } ], "configurationNotes": "対象環境・機能: x64-based Systems / ARM64-based Systems。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-38080", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38080.json", "fetchedAt": "2026-10-24T05:15:52.594Z", "publishedAt": "2024-07-09T17:02:34.187Z", "modifiedAt": "2026-02-10T23:34:32.727Z", "state": "published", "provider": "microsoft", "title": "Windows Hyper-V Elevation of Privilege Vulnerability", "descriptions": [ { "lang": "en-US", "value": "Windows Hyper-V Elevation of Privilege Vulnerability", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Microsoft Windows Hyper-V contains a privilege escalation vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38080", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Microsoft", "product": "Windows Server 2022", "sourcePath": "/containers/cna/affected/0", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "10.0.20348.0", "lessThan": "10.0.20348.2582", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 21H2", "sourcePath": "/containers/cna/affected/1", "platforms": [ "x64-based Systems", "ARM64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "10.0.0", "lessThan": "10.0.22000.3079", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H2", "sourcePath": "/containers/cna/affected/2", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "10.0.22621.0", "lessThan": "10.0.22621.3880", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H3", "sourcePath": "/containers/cna/affected/3", "platforms": [ "ARM64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "10.0.22631.0", "lessThan": "10.0.22631.3880", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 23H2", "sourcePath": "/containers/cna/affected/4", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/4/versions/0", "version": "10.0.22631.0", "lessThan": "10.0.22631.3880", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "sourcePath": "/containers/cna/affected/5", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/5/versions/0", "version": "10.0.25398.0", "lessThan": "10.0.25398.1009", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-190", "lang": "en-US", "description": "CWE-190: Integer Overflow or Wraparound", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C", "baseScore": 7.8, "baseSeverity": "HIGH", "provider": "microsoft", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38080", "label": "Windows Hyper-V Elevation of Privilege Vulnerability", "tags": [ "vendor-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-38080", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38080.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.2582\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38080.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 21H2\",\"platforms\":[\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.22000.3079\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38080.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22621.0\",\"lessThan\":\"10.0.22621.3880\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38080.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H3\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.3880\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38080.json", "sourcePath": "/containers/cna/affected/4", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 23H2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.3880\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38080.json", "sourcePath": "/containers/cna/affected/5", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022, 23H2 Edition (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.25398.0\",\"lessThan\":\"10.0.25398.1009\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38080.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Windows Hyper-V Elevation of Privilege Vulnerability", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38080.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-190: Integer Overflow or Wraparound\",\"lang\":\"en-US\",\"type\":\"CWE\",\"cweId\":\"CWE-190\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38080.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":7.8,\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-38080:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38080", "sourcePath": "retained:/originalText", "text": "Microsoft Windows Hyper-V contains a privilege escalation vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-38080:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38080", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38080", "modifiedAt": "2024-07-09T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-02-10T23:34:32.727Z", "fetchedAt": "2026-10-24T05:15:52.594Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-07-09T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Windows Server 2022 / Windows 11 version 21H2 / Windows 11 version 22H2 / Windows 11 version 22H3 / Windows 11 Version 23H2 / Windows Server 2022, 23H2 Edition (Server Core installation)に権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "本来与えられていない権限で、操作される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:15:52.594Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "acb3cc49b3e9e41edc0c5195de372787abbd9fdc778f8ccbca96d27f410cc93c", "sourceModifiedAt": "2026-02-10T23:34:32.727Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Windows Hyper-V に特権昇格の脆弱性が存在し、ローカルのユーザー権限を持つ攻撃者が SYSTEM 権限を取得できる可能性があります。", "risk": "攻撃者が SYSTEM 権限を取得すると、システム全体を制御できるようになります。", "summaryEvidenceIds": [ "E1", "E2", "E3" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "ローカルでユーザー権限を持つ攻撃者が対象です。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38080", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38080.json" ], "evidenceIds": [ "E2", "E3" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.2582未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38080.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 21H2。影響ありとして記載：10.0.0以上、10.0.22000.3079未満。対象の環境：x64-based Systems、ARM64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38080.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 22H2。影響ありとして記載：10.0.22621.0以上、10.0.22621.3880未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38080.json" ], "evidenceIds": [ "E6" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 22H3。影響ありとして記載：10.0.22631.0以上、10.0.22631.3880未満。対象の環境：ARM64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38080.json" ], "evidenceIds": [ "E7" ] }, { "text": "公式の対象表：Microsoft / Windows 11 Version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.3880未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38080.json" ], "evidenceIds": [ "E8" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2022, 23H2 Edition (Server Core installation)。影響ありとして記載：10.0.25398.0以上、10.0.25398.1009未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38080.json" ], "evidenceIds": [ "E9" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38080" ], "evidenceIds": [ "E11" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38080.json" ], "evidenceIds": [ "E4" ] }, { "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38080" ], "evidenceIds": [ "E10" ] }, { "text": "「CVE-2024-38080」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-38080", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38080", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38080", "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38080", "https://nvd.nist.gov/vuln/detail/CVE-2024-38080" ] }, { "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates" ] } ], "temporaryMitigations": [ { "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "https://www.cve.org/CVERecord?id=CVE-2024-38080", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38080", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38080", "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38080", "https://nvd.nist.gov/vuln/detail/CVE-2024-38080" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38080.json" ], "evidenceIds": [ "E4" ] }, { "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38080.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38080", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-38080", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38080", "label": "Windows Hyper-V Elevation of Privilege Vulnerability" }, { "url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38080", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38080", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38080.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Windows Hyper-V Elevation of Privilege Vulnerability", "language": "en-US", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38080", "sourceField": "retained:/originalText", "excerpt": "Microsoft Windows Hyper-V contains a privilege escalation vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38080.json", "sourceField": "/containers/cna/title", "excerpt": "Windows Hyper-V Elevation of Privilege Vulnerability", "language": null }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38080.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.2582\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38080.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 21H2\",\"platforms\":[\"x64-based Systems\",\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.22000.3079\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38080.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22621.0\",\"lessThan\":\"10.0.22621.3880\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38080.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H3\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.3880\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38080.json", "sourceField": "/containers/cna/affected/4", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 23H2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.3880\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38080.json", "sourceField": "/containers/cna/affected/5", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022, 23H2 Edition (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.25398.0\",\"lessThan\":\"10.0.25398.1009\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E10", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38080", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E11", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38080", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-38080\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-38080（Windows Server 2022 / Windows 11 version 21H2 / Windows 11 version 22H2 / Windows 11 version 22H3 / Windows 11 Version 23H2 / Windows Server 2022, 23H2 Edition (Server Core installation)）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・ローカルでユーザー権限を持つ攻撃者が対象です。\n・公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.2582未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 21H2。影響ありとして記載：10.0.0以上、10.0.22000.3079未満。対象の環境：x64-based Systems、ARM64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 22H2。影響ありとして記載：10.0.22621.0以上、10.0.22621.3880未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 22H3。影響ありとして記載：10.0.22631.0以上、10.0.22631.3880未満。対象の環境：ARM64-based Systems\n・公式の対象表：Microsoft / Windows 11 Version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.3880未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2022, 23H2 Edition (Server Core installation)。影響ありとして記載：10.0.25398.0以上、10.0.25398.1009未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-38080", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:15:52.594Z", "lastSuccess": "2026-10-24T05:15:52.594Z", "sourceCheckedAt": "2026-10-24T05:15:52.594Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-38112", "aliases": [], "title": "Windows 10 Version 22H2 / Windows 11 Version 23H2 / Windows 10 Version 1507 / Windows 11 version 22H2 / Windows 10 Version 1607 / Windows Server 2016 / Windows 10 Version 21H2 / Windows Server 2016 (Server Core installation) / Windows Server 2008 Ser：脆弱性情報", "summary": "Windows の MSHTML プラットフォームにスプーフィング脆弱性が存在します。", "risk": "この脆弱性は機密性、完全性、可用性に高い影響を及ぼす可能性があります。", "product": "Windows 10 Version 22H2 / Windows 11 Version 23H2 / Windows 10 Version 1507 / Windows 11 version 22H2 / Windows 10 Version 1607 / Windows Server 2016 / Windows 10 Version 21H2 / Windows Server 2016 (Server Core installation) / Windows Server 2008 Ser", "category": "windows", "component": "package", "severity": "high", "cvss": 7.5, "cvssVersion": "3.1", "cvssSource": "microsoft", "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C", "affected": [ { "product": "Windows 10 Version 22H2", "range": ">= 10.0.19045.0 / < 10.0.19045.4651（環境: x64-based Systems / ARM64-based Systems / 32-bit Systems）" }, { "product": "Windows 11 Version 23H2", "range": ">= 10.0.22631.0 / < 10.0.22631.3880（環境: x64-based Systems）" }, { "product": "Windows 10 Version 1507", "range": ">= 10.0.10240.0 / < 10.0.10240.20710（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows 11 version 22H2", "range": ">= 10.0.22621.0 / < 10.0.22621.3880（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows 10 Version 1607", "range": ">= 10.0.14393.0 / < 10.0.14393.7159（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows Server 2016", "range": ">= 10.0.14393.0 / < 10.0.14393.7159（環境: x64-based Systems）" }, { "product": "Windows 10 Version 21H2", "range": ">= 10.0.19043.0 / < 10.0.19044.4651（環境: 32-bit Systems / ARM64-based Systems / x64-based Systems）" }, { "product": "Windows Server 2016 (Server Core installation)", "range": ">= 10.0.14393.0 / < 10.0.14393.7159（環境: x64-based Systems）" }, { "product": "Windows Server 2008 Service Pack 2", "range": ">= 6.0.6003.0 / < 6.0.6003.22769（環境: 32-bit Systems）" }, { "product": "Windows Server 2008 Service Pack 2 (Server Core installation)", "range": ">= 6.0.6003.0 / < 6.0.6003.22769（環境: 32-bit Systems / x64-based Systems）" }, { "product": "Windows Server 2008 Service Pack 2", "range": ">= 6.0.6003.0 / < 6.0.6003.22769（環境: x64-based Systems）" }, { "product": "Windows 10 Version 1809", "range": ">= 10.0.17763.0 / < 10.0.17763.6054（環境: x64-based Systems / 32-bit Systems）" }, { "product": "Windows Server 2012 R2", "range": ">= 6.3.9600.0 / < 6.3.9600.22074（環境: x64-based Systems）" }, { "product": "Windows 11 version 22H3", "range": ">= 10.0.22631.0 / < 10.0.22631.3880（環境: ARM64-based Systems）" }, { "product": "Windows Server 2012 R2 (Server Core installation)", "range": ">= 6.3.9600.0 / < 6.3.9600.22074（環境: x64-based Systems）" }, { "product": "Windows Server 2022", "range": ">= 10.0.20348.0 / < 10.0.20348.2582（環境: x64-based Systems）" }, { "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "range": ">= 10.0.25398.0 / < 10.0.25398.1009（環境: x64-based Systems）" }, { "product": "Windows Server 2019 (Server Core installation)", "range": ">= 10.0.17763.0 / < 10.0.17763.6054（環境: x64-based Systems）" }, { "product": "Windows 11 version 21H2", "range": ">= 10.0.0 / < 10.0.22000.3079（環境: ARM64-based Systems / x64-based Systems）" }, { "product": "Windows Server 2019", "range": ">= 10.0.17763.0 / < 10.0.17763.6054（環境: x64-based Systems）" } ], "fixed": [], "steps": [ "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "「CVE-2024-38112」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38112", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-38112", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38112", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38112", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "publishedAt": "2024-07-09T17:02:38.208Z", "modifiedAt": "2026-02-10T23:34:36.797Z", "fetchedAt": "2026-10-24T05:15:52.594Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "", "sourceTitle": "Windows MSHTML Platform Spoofing Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Microsoft", "product": "Windows 10 Version 22H2", "platforms": [ "x64-based Systems", "ARM64-based Systems", "32-bit Systems" ], "versions": [ { "version": "10.0.19045.0", "lessThan": "10.0.19045.4651", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 23H2", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.22631.0", "lessThan": "10.0.22631.3880", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1507", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.10240.0", "lessThan": "10.0.10240.20710", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H2", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.22621.0", "lessThan": "10.0.22621.3880", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1607", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.7159", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.7159", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.19043.0", "lessThan": "10.0.19044.4651", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.14393.0", "lessThan": "10.0.14393.7159", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2", "platforms": [ "32-bit Systems" ], "versions": [ { "version": "6.0.6003.0", "lessThan": "6.0.6003.22769", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2 (Server Core installation)", "platforms": [ "32-bit Systems", "x64-based Systems" ], "versions": [ { "version": "6.0.6003.0", "lessThan": "6.0.6003.22769", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.0.6003.0", "lessThan": "6.0.6003.22769", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "platforms": [ "x64-based Systems", "32-bit Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.6054", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.3.9600.0", "lessThan": "6.3.9600.22074", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H3", "platforms": [ "ARM64-based Systems" ], "versions": [ { "version": "10.0.22631.0", "lessThan": "10.0.22631.3880", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "6.3.9600.0", "lessThan": "6.3.9600.22074", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.20348.0", "lessThan": "10.0.20348.2582", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.25398.0", "lessThan": "10.0.25398.1009", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.6054", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 21H2", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "versions": [ { "version": "10.0.0", "lessThan": "10.0.22000.3079", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019", "platforms": [ "x64-based Systems" ], "versions": [ { "version": "10.0.17763.0", "lessThan": "10.0.17763.6054", "versionType": "custom", "status": "affected" } ] } ], "configurationNotes": "対象環境・機能: x64-based Systems / ARM64-based Systems / 32-bit Systems。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-38112", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "fetchedAt": "2026-10-24T05:15:52.594Z", "publishedAt": "2024-07-09T17:02:38.208Z", "modifiedAt": "2026-02-10T23:34:36.797Z", "state": "published", "provider": "microsoft", "title": "Windows MSHTML Platform Spoofing Vulnerability", "descriptions": [ { "lang": "en-US", "value": "Windows MSHTML Platform Spoofing Vulnerability", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Microsoft Windows MSHTML Platform contains a spoofing vulnerability that has a high impact to confidentiality, integrity, and availability.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38112", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Microsoft", "product": "Windows 10 Version 22H2", "sourcePath": "/containers/cna/affected/0", "platforms": [ "x64-based Systems", "ARM64-based Systems", "32-bit Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "10.0.19045.0", "lessThan": "10.0.19045.4651", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 Version 23H2", "sourcePath": "/containers/cna/affected/1", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "10.0.22631.0", "lessThan": "10.0.22631.3880", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1507", "sourcePath": "/containers/cna/affected/2", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "10.0.10240.0", "lessThan": "10.0.10240.20710", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H2", "sourcePath": "/containers/cna/affected/3", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "10.0.22621.0", "lessThan": "10.0.22621.3880", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1607", "sourcePath": "/containers/cna/affected/4", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/4/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.7159", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016", "sourcePath": "/containers/cna/affected/5", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/5/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.7159", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 21H2", "sourcePath": "/containers/cna/affected/6", "platforms": [ "32-bit Systems", "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/6/versions/0", "version": "10.0.19043.0", "lessThan": "10.0.19044.4651", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2016 (Server Core installation)", "sourcePath": "/containers/cna/affected/7", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/7/versions/0", "version": "10.0.14393.0", "lessThan": "10.0.14393.7159", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2", "sourcePath": "/containers/cna/affected/8", "platforms": [ "32-bit Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/8/versions/0", "version": "6.0.6003.0", "lessThan": "6.0.6003.22769", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2 (Server Core installation)", "sourcePath": "/containers/cna/affected/9", "platforms": [ "32-bit Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/9/versions/0", "version": "6.0.6003.0", "lessThan": "6.0.6003.22769", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2008 Service Pack 2", "sourcePath": "/containers/cna/affected/10", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/10/versions/0", "version": "6.0.6003.0", "lessThan": "6.0.6003.22769", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 10 Version 1809", "sourcePath": "/containers/cna/affected/11", "platforms": [ "x64-based Systems", "32-bit Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/11/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.6054", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2", "sourcePath": "/containers/cna/affected/12", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/12/versions/0", "version": "6.3.9600.0", "lessThan": "6.3.9600.22074", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 22H3", "sourcePath": "/containers/cna/affected/13", "platforms": [ "ARM64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/13/versions/0", "version": "10.0.22631.0", "lessThan": "10.0.22631.3880", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2012 R2 (Server Core installation)", "sourcePath": "/containers/cna/affected/14", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/14/versions/0", "version": "6.3.9600.0", "lessThan": "6.3.9600.22074", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022", "sourcePath": "/containers/cna/affected/15", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/15/versions/0", "version": "10.0.20348.0", "lessThan": "10.0.20348.2582", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2022, 23H2 Edition (Server Core installation)", "sourcePath": "/containers/cna/affected/16", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/16/versions/0", "version": "10.0.25398.0", "lessThan": "10.0.25398.1009", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019 (Server Core installation)", "sourcePath": "/containers/cna/affected/17", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/17/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.6054", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows 11 version 21H2", "sourcePath": "/containers/cna/affected/18", "platforms": [ "ARM64-based Systems", "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/18/versions/0", "version": "10.0.0", "lessThan": "10.0.22000.3079", "versionType": "custom", "status": "affected" } ] }, { "vendor": "Microsoft", "product": "Windows Server 2019", "sourcePath": "/containers/cna/affected/19", "platforms": [ "x64-based Systems" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/19/versions/0", "version": "10.0.17763.0", "lessThan": "10.0.17763.6054", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-451", "lang": "en-US", "description": "CWE-451: User Interface (UI) Misrepresentation of Critical Information", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C", "baseScore": 7.5, "baseSeverity": "HIGH", "provider": "microsoft", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38112", "label": "Windows MSHTML Platform Spoofing Vulnerability", "tags": [ "vendor-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-38112", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 22H2\",\"platforms\":[\"x64-based Systems\",\"ARM64-based Systems\",\"32-bit Systems\"],\"versions\":[{\"version\":\"10.0.19045.0\",\"lessThan\":\"10.0.19045.4651\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 23H2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.3880\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1507\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.10240.0\",\"lessThan\":\"10.0.10240.20710\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22621.0\",\"lessThan\":\"10.0.22621.3880\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourcePath": "/containers/cna/affected/4", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.7159\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourcePath": "/containers/cna/affected/5", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.7159\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourcePath": "/containers/cna/affected/6", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19043.0\",\"lessThan\":\"10.0.19044.4651\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourcePath": "/containers/cna/affected/7", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.7159\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourcePath": "/containers/cna/affected/8", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2\",\"platforms\":[\"32-bit Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"6.0.6003.22769\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourcePath": "/containers/cna/affected/9", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2 (Server Core installation)\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"6.0.6003.22769\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourcePath": "/containers/cna/affected/10", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"6.0.6003.22769\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourcePath": "/containers/cna/affected/11", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"x64-based Systems\",\"32-bit Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.6054\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourcePath": "/containers/cna/affected/12", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.22074\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourcePath": "/containers/cna/affected/13", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H3\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.3880\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourcePath": "/containers/cna/affected/14", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.22074\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourcePath": "/containers/cna/affected/15", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.2582\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/16", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourcePath": "/containers/cna/affected/16", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022, 23H2 Edition (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.25398.0\",\"lessThan\":\"10.0.25398.1009\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/17", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourcePath": "/containers/cna/affected/17", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.6054\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/18", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourcePath": "/containers/cna/affected/18", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 21H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.22000.3079\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/19", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourcePath": "/containers/cna/affected/19", "text": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.6054\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Windows MSHTML Platform Spoofing Vulnerability", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"CWE-451: User Interface (UI) Misrepresentation of Critical Information\",\"lang\":\"en-US\",\"type\":\"CWE\",\"cweId\":\"CWE-451\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseSeverity\":\"HIGH\",\"baseScore\":7.5,\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-38112:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38112", "sourcePath": "retained:/originalText", "text": "Microsoft Windows MSHTML Platform contains a spoofing vulnerability that has a high impact to confidentiality, integrity, and availability.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-38112:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38112", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38112", "modifiedAt": "2024-07-09T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-02-10T23:34:36.797Z", "fetchedAt": "2026-10-24T05:15:52.594Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-07-09T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Windows 10 Version 22H2 / Windows 11 Version 23H2 / Windows 10 Version 1507 / Windows 11 version 22H2 / Windows 10 Version 1607 / Windows Server 2016 / Windows 10 Version 21H2 / Windows Server 2016 (Server Core installation) / Windows Server 2008 Serに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:15:52.594Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "248ed6e2422a25918f7332a801f863868329772fb4b93b36c91aa913f153fe16", "sourceModifiedAt": "2026-02-10T23:34:36.797Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Windows の MSHTML プラットフォームにスプーフィング脆弱性が存在します。", "risk": "この脆弱性は機密性、完全性、可用性に高い影響を及ぼす可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E3" ], "applicability": [ { "text": "公式の対象表：Microsoft / Windows 10 Version 22H2。影響ありとして記載：10.0.19045.0以上、10.0.19045.4651未満。対象の環境：x64-based Systems、ARM64-based Systems、32-bit Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Microsoft / Windows 11 Version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.3880未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1507。影響ありとして記載：10.0.10240.0以上、10.0.10240.20710未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json" ], "evidenceIds": [ "E6" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 22H2。影響ありとして記載：10.0.22621.0以上、10.0.22621.3880未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json" ], "evidenceIds": [ "E7" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.14393.0以上、10.0.14393.7159未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json" ], "evidenceIds": [ "E8" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.14393.0以上、10.0.14393.7159未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json" ], "evidenceIds": [ "E9" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 21H2。影響ありとして記載：10.0.19043.0以上、10.0.19044.4651未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json" ], "evidenceIds": [ "E10" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.14393.0以上、10.0.14393.7159未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json" ], "evidenceIds": [ "E11" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2008 Service Pack 2。影響ありとして記載：6.0.6003.0以上、6.0.6003.22769未満。対象の環境：32-bit Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json" ], "evidenceIds": [ "E12" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2008 Service Pack 2 (Server Core installation)。影響ありとして記載：6.0.6003.0以上、6.0.6003.22769未満。対象の環境：32-bit Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json" ], "evidenceIds": [ "E13" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2008 Service Pack 2。影響ありとして記載：6.0.6003.0以上、6.0.6003.22769未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json" ], "evidenceIds": [ "E14" ] }, { "text": "公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、10.0.17763.6054未満。対象の環境：x64-based Systems、32-bit Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json" ], "evidenceIds": [ "E15" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012 R2。影響ありとして記載：6.3.9600.0以上、6.3.9600.22074未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json" ], "evidenceIds": [ "E16" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 22H3。影響ありとして記載：10.0.22631.0以上、10.0.22631.3880未満。対象の環境：ARM64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json" ], "evidenceIds": [ "E17" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2012 R2 (Server Core installation)。影響ありとして記載：6.3.9600.0以上、6.3.9600.22074未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json" ], "evidenceIds": [ "E18" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.2582未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json" ], "evidenceIds": [ "E19" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2022, 23H2 Edition (Server Core installation)。影響ありとして記載：10.0.25398.0以上、10.0.25398.1009未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json" ], "evidenceIds": [ "E20" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、10.0.17763.6054未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json" ], "evidenceIds": [ "E21" ] }, { "text": "公式の対象表：Microsoft / Windows 11 version 21H2。影響ありとして記載：10.0.0以上、10.0.22000.3079未満。対象の環境：ARM64-based Systems、x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json" ], "evidenceIds": [ "E22" ] }, { "text": "公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、10.0.17763.6054未満。対象の環境：x64-based Systems", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json" ], "evidenceIds": [ "E23" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38112" ], "evidenceIds": [ "E25" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json" ], "evidenceIds": [ "E4" ] }, { "text": "「スタート」→「設定」→「システム」→「バージョン情報」を開き、Windowsのエディション・バージョン・OSビルドを控えます。会社のPCやサーバーは、この情報とCVE番号を管理担当者へ渡してください。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device" ] } ], "actions": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が利用できない場合は製品の使用を中止してください。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38112" ], "evidenceIds": [ "E24" ] }, { "text": "「CVE-2024-38112」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-38112", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38112", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38112", "https://nvd.nist.gov/vuln/detail/CVE-2024-38112" ] }, { "text": "Windows 11は「設定」→「Windows Update」→「更新プログラムのチェック」を開き、提供された更新を適用します。再起動を求められたら完了させます。会社管理のPC、Windows Server、サポート外の版は管理担当者に適用する修正番号と配布予定を確認してください。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates" ] } ], "temporaryMitigations": [ { "text": "すぐ更新できない場合は、CVE番号、Windowsの版、業務で必要な機能を管理担当者に伝え、修正までの利用方法と更新予定を決めてください。すべてのWindowsの問題に同じ回避策が使えるわけではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "https://www.cve.org/CVERecord?id=CVE-2024-38112", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38112", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38112", "https://nvd.nist.gov/vuln/detail/CVE-2024-38112" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json" ], "evidenceIds": [ "E4" ] }, { "text": "再起動後にWindows Updateを開き直して失敗・再起動待ちがないか確認し、管理担当者にこのCVEに対応する修正の適用結果を確認してもらってください。「最新の状態」と出ても、別製品の更新やサポート外の版の修正を保証するものではありません。", "kind": "procedure", "sourceUrls": [ "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "label": "CVE：microsoft" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38112", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-38112", "label": "CVE公式レコード" }, { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38112", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38112", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://support.microsoft.com/en-us/windows/experience/find-information-about-your-windows-device", "label": "Microsoft公式：Windowsの情報を調べる" }, { "url": "https://support.microsoft.com/en-us/windows/deployment/updates-lifecycle/install-windows-updates", "label": "Microsoft公式：Windows Updateの操作" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Windows MSHTML Platform Spoofing Vulnerability", "language": "en-US", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourceField": "/containers/cna/title", "excerpt": "Windows MSHTML Platform Spoofing Vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38112", "sourceField": "retained:/originalText", "excerpt": "Microsoft Windows MSHTML Platform contains a spoofing vulnerability that has a high impact to confidentiality, integrity, and availability.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 22H2\",\"platforms\":[\"x64-based Systems\",\"ARM64-based Systems\",\"32-bit Systems\"],\"versions\":[{\"version\":\"10.0.19045.0\",\"lessThan\":\"10.0.19045.4651\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 Version 23H2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.3880\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1507\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.10240.0\",\"lessThan\":\"10.0.10240.20710\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.22621.0\",\"lessThan\":\"10.0.22621.3880\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourceField": "/containers/cna/affected/4", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1607\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.7159\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourceField": "/containers/cna/affected/5", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.7159\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourceField": "/containers/cna/affected/6", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 21H2\",\"platforms\":[\"32-bit Systems\",\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.19043.0\",\"lessThan\":\"10.0.19044.4651\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourceField": "/containers/cna/affected/7", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2016 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.14393.0\",\"lessThan\":\"10.0.14393.7159\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourceField": "/containers/cna/affected/8", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2\",\"platforms\":[\"32-bit Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"6.0.6003.22769\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourceField": "/containers/cna/affected/9", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2 (Server Core installation)\",\"platforms\":[\"32-bit Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"6.0.6003.22769\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourceField": "/containers/cna/affected/10", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2008 Service Pack 2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.0.6003.0\",\"lessThan\":\"6.0.6003.22769\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourceField": "/containers/cna/affected/11", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 10 Version 1809\",\"platforms\":[\"x64-based Systems\",\"32-bit Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.6054\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E16", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourceField": "/containers/cna/affected/12", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.22074\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E17", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourceField": "/containers/cna/affected/13", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 22H3\",\"platforms\":[\"ARM64-based Systems\"],\"versions\":[{\"version\":\"10.0.22631.0\",\"lessThan\":\"10.0.22631.3880\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E18", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourceField": "/containers/cna/affected/14", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2012 R2 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"6.3.9600.0\",\"lessThan\":\"6.3.9600.22074\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E19", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourceField": "/containers/cna/affected/15", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.20348.0\",\"lessThan\":\"10.0.20348.2582\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E20", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourceField": "/containers/cna/affected/16", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2022, 23H2 Edition (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.25398.0\",\"lessThan\":\"10.0.25398.1009\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E21", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourceField": "/containers/cna/affected/17", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019 (Server Core installation)\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.6054\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E22", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourceField": "/containers/cna/affected/18", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows 11 version 21H2\",\"platforms\":[\"ARM64-based Systems\",\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.0\",\"lessThan\":\"10.0.22000.3079\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E23", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/38xxx/CVE-2024-38112.json", "sourceField": "/containers/cna/affected/19", "excerpt": "{\"vendor\":\"Microsoft\",\"product\":\"Windows Server 2019\",\"platforms\":[\"x64-based Systems\"],\"versions\":[{\"version\":\"10.0.17763.0\",\"lessThan\":\"10.0.17763.6054\",\"versionType\":\"custom\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E24", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38112", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E25", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-38112", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-38112\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-38112（Windows 10 Version 22H2 / Windows 11 Version 23H2 / Windows 10 Version 1507 / Windows 11 version 22H2 / Windows 10 Version 1607 / Windows Server 2016 / Windows 10 Version 21H2 / Windows Server 2016 (Server Core installation) / Windows Server 2008 Ser）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：Microsoft / Windows 10 Version 22H2。影響ありとして記載：10.0.19045.0以上、10.0.19045.4651未満。対象の環境：x64-based Systems、ARM64-based Systems、32-bit Systems\n・公式の対象表：Microsoft / Windows 11 Version 23H2。影響ありとして記載：10.0.22631.0以上、10.0.22631.3880未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1507。影響ありとして記載：10.0.10240.0以上、10.0.10240.20710未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 22H2。影響ありとして記載：10.0.22621.0以上、10.0.22621.3880未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1607。影響ありとして記載：10.0.14393.0以上、10.0.14393.7159未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016。影響ありとして記載：10.0.14393.0以上、10.0.14393.7159未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 21H2。影響ありとして記載：10.0.19043.0以上、10.0.19044.4651未満。対象の環境：32-bit Systems、ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2016 (Server Core installation)。影響ありとして記載：10.0.14393.0以上、10.0.14393.7159未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 Service Pack 2。影響ありとして記載：6.0.6003.0以上、6.0.6003.22769未満。対象の環境：32-bit Systems\n・公式の対象表：Microsoft / Windows Server 2008 Service Pack 2 (Server Core installation)。影響ありとして記載：6.0.6003.0以上、6.0.6003.22769未満。対象の環境：32-bit Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2008 Service Pack 2。影響ありとして記載：6.0.6003.0以上、6.0.6003.22769未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 10 Version 1809。影響ありとして記載：10.0.17763.0以上、10.0.17763.6054未満。対象の環境：x64-based Systems、32-bit Systems\n・公式の対象表：Microsoft / Windows Server 2012 R2。影響ありとして記載：6.3.9600.0以上、6.3.9600.22074未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 22H3。影響ありとして記載：10.0.22631.0以上、10.0.22631.3880未満。対象の環境：ARM64-based Systems\n・公式の対象表：Microsoft / Windows Server 2012 R2 (Server Core installation)。影響ありとして記載：6.3.9600.0以上、6.3.9600.22074未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2022。影響ありとして記載：10.0.20348.0以上、10.0.20348.2582未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2022, 23H2 Edition (Server Core installation)。影響ありとして記載：10.0.25398.0以上、10.0.25398.1009未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019 (Server Core installation)。影響ありとして記載：10.0.17763.0以上、10.0.17763.6054未満。対象の環境：x64-based Systems\n・公式の対象表：Microsoft / Windows 11 version 21H2。影響ありとして記載：10.0.0以上、10.0.22000.3079未満。対象の環境：ARM64-based Systems、x64-based Systems\n・公式の対象表：Microsoft / Windows Server 2019。影響ありとして記載：10.0.17763.0以上、10.0.17763.6054未満。対象の環境：x64-based Systems\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-38112", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:15:52.594Z", "lastSuccess": "2026-10-24T05:15:52.594Z", "sourceCheckedAt": "2026-10-24T05:15:52.594Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2024-20399", "aliases": [], "title": "Cisco NX-OS Software：コード実行", "summary": "Cisco NX-OS Software の CLI において、管理者権限を持つ認証ユーザーが特定の設定コマンドに細工した引数を与えると、根本的なオペレーティングシステム上で root 権限の任意コマンドを実行できる可能性があります。", "risk": "攻撃者が成功すると、対象デバイスの基盤 OS 上で root 権限で任意のコマンドを実行できるようになります。", "product": "Cisco NX-OS Software", "category": "other", "component": "package", "severity": "medium", "cvss": 6, "cvssVersion": "3.1", "cvssSource": "cisco", "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "affected": [ { "product": "Cisco NX-OS Software", "range": "8.2(5)" }, { "product": "Cisco NX-OS Software", "range": "7.3(6)N1(1a)" }, { "product": "Cisco NX-OS Software", "range": "7.3(5)D1(1)" }, { "product": "Cisco NX-OS Software", "range": "8.4(2)" }, { "product": "Cisco NX-OS Software", "range": "7.3(6)N1(1)" }, { "product": "Cisco NX-OS Software", "range": "6.2(2)" }, { "product": "Cisco NX-OS Software", "range": "8.4(3)" }, { "product": "Cisco NX-OS Software", "range": "9.2(3)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I5(2)" }, { "product": "Cisco NX-OS Software", "range": "8.2(1)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A8(7a)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I4(5)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A6(1)" }, { "product": "Cisco NX-OS Software", "range": "7.3(1)D1(1)" }, { "product": "Cisco NX-OS Software", "range": "6.2(14a)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I4(6)" }, { "product": "Cisco NX-OS Software", "range": "7.3(4)N1(1)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I4(3)" }, { "product": "Cisco NX-OS Software", "range": "9.2(2v)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A6(5b)" }, { "product": "Cisco NX-OS Software", "range": "7.3(0)D1(1)" }, { "product": "Cisco NX-OS Software", "range": "6.2(17a)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I4(7)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)U6(1a)" }, { "product": "Cisco NX-OS Software", "range": "7.1(5)N1(1b)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I4(1)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I4(8)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I4(2)" }, { "product": "Cisco NX-OS Software", "range": "7.1(4)N1(1c)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)IM3(1)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)U6(5a)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A8(11)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A6(4a)" }, { "product": "Cisco NX-OS Software", "range": "6.2(9)" }, { "product": "Cisco NX-OS Software", "range": "6.2(5)" }, { "product": "Cisco NX-OS Software", "range": "7.3(4)D1(1)" }, { "product": "Cisco NX-OS Software", "range": "6.2(20)" }, { "product": "Cisco NX-OS Software", "range": "9.2(1)" }, { "product": "Cisco NX-OS Software", "range": "9.2(2t)" }, { "product": "Cisco NX-OS Software", "range": "9.2(3y)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I4(1t)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)U6(5c)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A6(4)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I7(6z)" }, { "product": "Cisco NX-OS Software", "range": "9.3(2)" }, { "product": "Cisco NX-OS Software", "range": "7.3(1)DY(1)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)F3(3)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)U6(6)" }, { "product": "Cisco NX-OS Software", "range": "6.2(29)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I7(3z)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)IM7(2)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A8(11b)" }, { "product": "Cisco NX-OS Software", "range": "6.2(9a)" }, { "product": "Cisco NX-OS Software", "range": "7.3(0)N1(1)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I7(5a)" }, { "product": "Cisco NX-OS Software", "range": "6.2(11d)" }, { "product": "Cisco NX-OS Software", "range": "8.1(1)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I6(1)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)U6(10)" }, { "product": "Cisco NX-OS Software", "range": "7.2(2)D1(2)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)IM3(2)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A6(8)" }, { "product": "Cisco NX-OS Software", "range": "8.2(2)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)U6(1)" }, { "product": "Cisco NX-OS Software", "range": "7.3(2)N1(1c)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I5(3b)" }, { "product": "Cisco NX-OS Software", "range": "8.3(2)" }, { "product": "Cisco NX-OS Software", "range": "7.3(5)N1(1)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A6(2a)" }, { "product": "Cisco NX-OS Software", "range": "7.3(2)N1(1b)" }, { "product": "Cisco NX-OS Software", "range": "6.2(27)" }, { "product": "Cisco NX-OS Software", "range": "7.3(2)D1(3a)" }, { "product": "Cisco NX-OS Software", "range": "7.3(1)N1(1)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)U6(7)" }, { "product": "Cisco NX-OS Software", "range": "9.2(4)" }, { "product": "Cisco NX-OS Software", "range": "7.1(4)N1(1a)" }, { "product": "Cisco NX-OS Software", "range": "7.1(3)N1(4)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)IM3(2a)" }, { "product": "Cisco NX-OS Software", "range": "6.2(8b)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A8(10)" }, { "product": "Cisco NX-OS Software", "range": "7.1(3)N1(2)" }, { "product": "Cisco NX-OS Software", "range": "6.2(13)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A8(2)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)IC4(4)" }, { "product": "Cisco NX-OS Software", "range": "6.2(1)" }, { "product": "Cisco NX-OS Software", "range": "7.3(4)N1(1a)" }, { "product": "Cisco NX-OS Software", "range": "8.1(2)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A6(3)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)U6(5b)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)F3(3c)" }, { "product": "Cisco NX-OS Software", "range": "7.3(3)D1(1)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)F3(1)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)U6(5)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)F3(5)" }, { "product": "Cisco NX-OS Software", "range": "7.1(2)N1(1)" }, { "product": "Cisco NX-OS Software", "range": "7.1(3)N1(3)" }, { "product": "Cisco NX-OS Software", "range": "8.2(3)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A6(7)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I7(2)" }, { "product": "Cisco NX-OS Software", "range": "6.2(5a)" }, { "product": "Cisco NX-OS Software", "range": "6.2(18)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A6(5)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)IM3(2b)" }, { "product": "Cisco NX-OS Software", "range": "7.1(3)N1(1)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)U6(4a)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I5(3)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I7(3)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A8(6)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I6(2)" }, { "product": "Cisco NX-OS Software", "range": "8.3(1)" }, { "product": "Cisco NX-OS Software", "range": "6.2(3)" }, { "product": "Cisco NX-OS Software", "range": "6.2(22)" }, { "product": "Cisco NX-OS Software", "range": "7.1(1)N1(1)" }, { "product": "Cisco NX-OS Software", "range": "8.4(1)" }, { "product": "Cisco NX-OS Software", "range": "8.1(1b)" }, { "product": "Cisco NX-OS Software", "range": "7.3(0)N1(1b)" }, { "product": "Cisco NX-OS Software", "range": "7.2(2)D1(4)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A8(5)" }, { "product": "Cisco NX-OS Software", "range": "7.3(0)DX(1)" }, { "product": "Cisco NX-OS Software", "range": "7.1(4)N1(1d)" }, { "product": "Cisco NX-OS Software", "range": "7.3(2)D1(1)" }, { "product": "Cisco NX-OS Software", "range": "7.3(2)N1(1)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)U6(8)" }, { "product": "Cisco NX-OS Software", "range": "7.1(1)N1(1a)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)IM3(3)" }, { "product": "Cisco NX-OS Software", "range": "9.3(1)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)U6(2)" }, { "product": "Cisco NX-OS Software", "range": "6.2(9b)" }, { "product": "Cisco NX-OS Software", "range": "7.1(3)N1(2a)" }, { "product": "Cisco NX-OS Software", "range": "7.3(0)N1(1a)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A8(7)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I7(6)" }, { "product": "Cisco NX-OS Software", "range": "7.3(2)D1(2)" }, { "product": "Cisco NX-OS Software", "range": "6.2(25)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)U6(3a)" }, { "product": "Cisco NX-OS Software", "range": "8.0(1)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A8(11a)" }, { "product": "Cisco NX-OS Software", "range": "6.2(11e)" }, { "product": "Cisco NX-OS Software", "range": "7.1(3)N1(5)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I4(8z)" }, { "product": "Cisco NX-OS Software", "range": "6.2(11)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I4(9)" }, { "product": "Cisco NX-OS Software", "range": "6.2(16)" }, { "product": "Cisco NX-OS Software", "range": "6.2(19)" }, { "product": "Cisco NX-OS Software", "range": "8.2(4)" }, { "product": "Cisco NX-OS Software", "range": "6.2(2a)" }, { "product": "Cisco NX-OS Software", "range": "7.2(2)D1(3)" }, { "product": "Cisco NX-OS Software", "range": "7.1(0)N1(1b)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I7(4)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I7(7)" }, { "product": "Cisco NX-OS Software", "range": "6.2(5b)" }, { "product": "Cisco NX-OS Software", "range": "7.3(0)DY(1)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A8(9)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A8(1)" }, { "product": "Cisco NX-OS Software", "range": "7.1(5)N1(1)" }, { "product": "Cisco NX-OS Software", "range": "7.2(1)D1(1)" }, { "product": "Cisco NX-OS Software", "range": "6.2(15)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A6(6)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A8(10a)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I5(1)" }, { "product": "Cisco NX-OS Software", "range": "9.3(1z)" }, { "product": "Cisco NX-OS Software", "range": "9.2(2)" }, { "product": "Cisco NX-OS Software", "range": "6.2(7)" }, { "product": "Cisco NX-OS Software", "range": "6.2(9c)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)F3(4)" }, { "product": "Cisco NX-OS Software", "range": "7.3(3)N1(1)" }, { "product": "Cisco NX-OS Software", "range": "6.2(6b)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I4(8b)" }, { "product": "Cisco NX-OS Software", "range": "8.1(2a)" }, { "product": "Cisco NX-OS Software", "range": "7.3(2)D1(3)" }, { "product": "Cisco NX-OS Software", "range": "6.2(8)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A8(3)" }, { "product": "Cisco NX-OS Software", "range": "6.2(11b)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I4(6t)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I5(3a)" }, { "product": "Cisco NX-OS Software", "range": "8.1(1a)" }, { "product": "Cisco NX-OS Software", "range": "6.2(13a)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A8(8)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I7(5)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)F3(3a)" }, { "product": "Cisco NX-OS Software", "range": "7.1(0)N1(1a)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A8(4)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A6(3a)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A6(5a)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)F2(1)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I4(8a)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)U6(9)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)F3(2)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)U6(2a)" }, { "product": "Cisco NX-OS Software", "range": "6.2(12)" }, { "product": "Cisco NX-OS Software", "range": "6.2(17)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I4(4)" }, { "product": "Cisco NX-OS Software", "range": "6.2(23)" }, { "product": "Cisco NX-OS Software", "range": "6.2(13b)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)U6(3)" }, { "product": "Cisco NX-OS Software", "range": "6.2(10)" }, { "product": "Cisco NX-OS Software", "range": "6.2(6a)" }, { "product": "Cisco NX-OS Software", "range": "6.2(6)" }, { "product": "Cisco NX-OS Software", "range": "7.1(2)N1(1a)" }, { "product": "Cisco NX-OS Software", "range": "6.2(14)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I7(1)" }, { "product": "Cisco NX-OS Software", "range": "6.2(14b)" }, { "product": "Cisco NX-OS Software", "range": "6.2(21)" }, { "product": "Cisco NX-OS Software", "range": "7.2(2)D1(1)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)F2(2)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)IA7(2)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)IA7(1)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A8(7b)" }, { "product": "Cisco NX-OS Software", "range": "6.2(8a)" }, { "product": "Cisco NX-OS Software", "range": "6.2(11c)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)F1(1)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A6(1a)" }, { "product": "Cisco NX-OS Software", "range": "7.1(0)N1(1)" }, { "product": "Cisco NX-OS Software", "range": "7.2(0)D1(1)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A6(2)" }, { "product": "Cisco NX-OS Software", "range": "7.1(4)N1(1)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)A8(4a)" }, { "product": "Cisco NX-OS Software", "range": "6.2(20a)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)U6(4)" }, { "product": "Cisco NX-OS Software", "range": "8.4(1a)" }, { "product": "Cisco NX-OS Software", "range": "9.3(3)" }, { "product": "Cisco NX-OS Software", "range": "7.3(2)D1(1d)" }, { "product": "Cisco NX-OS Software", "range": "7.3(7)N1(1)" }, { "product": "Cisco NX-OS Software", "range": "6.2(24)" }, { "product": "Cisco NX-OS Software", "range": "6.2(31)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I7(8)" }, { "product": "Cisco NX-OS Software", "range": "6.0(2)U6(10a)" }, { "product": "Cisco NX-OS Software", "range": "7.3(7)N1(1a)" }, { "product": "Cisco NX-OS Software", "range": "9.3(4)" }, { "product": "Cisco NX-OS Software", "range": "7.3(6)D1(1)" }, { "product": "Cisco NX-OS Software", "range": "6.2(26)" }, { "product": "Cisco NX-OS Software", "range": "8.2(6)" }, { "product": "Cisco NX-OS Software", "range": "6.2(33)" }, { "product": "Cisco NX-OS Software", "range": "9.3(5)" }, { "product": "Cisco NX-OS Software", "range": "8.4(2a)" }, { "product": "Cisco NX-OS Software", "range": "8.4(2b)" }, { "product": "Cisco NX-OS Software", "range": "7.3(8)N1(1)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I7(9)" }, { "product": "Cisco NX-OS Software", "range": "7.3(7)N1(1b)" }, { "product": "Cisco NX-OS Software", "range": "6.2(24a)" }, { "product": "Cisco NX-OS Software", "range": "8.5(1)" }, { "product": "Cisco NX-OS Software", "range": "9.3(6)" }, { "product": "Cisco NX-OS Software", "range": "10.1(2)" }, { "product": "Cisco NX-OS Software", "range": "10.1(1)" }, { "product": "Cisco NX-OS Software", "range": "8.4(4)" }, { "product": "Cisco NX-OS Software", "range": "7.3(7)D1(1)" }, { "product": "Cisco NX-OS Software", "range": "8.4(2c)" }, { "product": "Cisco NX-OS Software", "range": "9.3(5w)" }, { "product": "Cisco NX-OS Software", "range": "8.2(7)" }, { "product": "Cisco NX-OS Software", "range": "7.3(9)N1(1)" }, { "product": "Cisco NX-OS Software", "range": "9.3(7)" }, { "product": "Cisco NX-OS Software", "range": "9.3(7k)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I7(9w)" }, { "product": "Cisco NX-OS Software", "range": "10.2(1)" }, { "product": "Cisco NX-OS Software", "range": "7.3(8)N1(1a)" }, { "product": "Cisco NX-OS Software", "range": "7.3(8)D1(1)" }, { "product": "Cisco NX-OS Software", "range": "9.3(7a)" }, { "product": "Cisco NX-OS Software", "range": "8.2(7a)" }, { "product": "Cisco NX-OS Software", "range": "9.3(8)" }, { "product": "Cisco NX-OS Software", "range": "8.4(4a)" }, { "product": "Cisco NX-OS Software", "range": "8.4(2d)" }, { "product": "Cisco NX-OS Software", "range": "7.3(10)N1(1)" }, { "product": "Cisco NX-OS Software", "range": "8.4(5)" }, { "product": "Cisco NX-OS Software", "range": "7.0(3)I7(10)" }, { "product": "Cisco NX-OS Software", "range": "7.3(8)N1(1b)" }, { "product": "Cisco NX-OS Software", "range": "8.2(8)" }, { "product": "Cisco NX-OS Software", "range": "10.2(1q)" }, { "product": "Cisco NX-OS Software", "range": "10.2(2)" }, { "product": "Cisco NX-OS Software", "range": "9.3(9)" }, { "product": "Cisco NX-OS Software", "range": "7.3(9)D1(1)" }, { "product": "Cisco NX-OS Software", "range": "7.3(11)N1(1)" }, { "product": "Cisco NX-OS Software", "range": "10.2(3)" }, { "product": "Cisco NX-OS Software", "range": "8.4(6)" }, { "product": "Cisco NX-OS Software", "range": "8.4(2e)" }, { "product": "Cisco NX-OS Software", "range": "9.3(10)" }, { "product": "Cisco NX-OS Software", "range": "7.3(11)N1(1a)" }, { "product": "Cisco NX-OS Software", "range": "10.2(2a)" }, { "product": "Cisco NX-OS Software", "range": "7.3(12)N1(1)" }, { "product": "Cisco NX-OS Software", "range": "9.2(1a)" }, { "product": "Cisco NX-OS Software", "range": "8.2(9)" }, { "product": "Cisco NX-OS Software", "range": "10.3(1)" }, { "product": "Cisco NX-OS Software", "range": "10.2(4)" }, { "product": "Cisco NX-OS Software", "range": "7.3(13)N1(1)" }, { "product": "Cisco NX-OS Software", "range": "8.4(7)" }, { "product": "Cisco NX-OS Software", "range": "10.3(2)" }, { "product": "Cisco NX-OS Software", "range": "8.4(6a)" }, { "product": "Cisco NX-OS Software", "range": "9.3(11)" }, { "product": "Cisco NX-OS Software", "range": "10.3(3)" }, { "product": "Cisco NX-OS Software", "range": "10.2(5)" }, { "product": "Cisco NX-OS Software", "range": "9.4(1)" }, { "product": "Cisco NX-OS Software", "range": "9.3(2a)" }, { "product": "Cisco NX-OS Software", "range": "8.4(2f)" }, { "product": "Cisco NX-OS Software", "range": "8.2(10)" }, { "product": "Cisco NX-OS Software", "range": "9.3(12)" }, { "product": "Cisco NX-OS Software", "range": "10.4(1)" }, { "product": "Cisco NX-OS Software", "range": "8.4(8)" }, { "product": "Cisco NX-OS Software", "range": "10.3(99w)" }, { "product": "Cisco NX-OS Software", "range": "7.3(14)N1(1)" }, { "product": "Cisco NX-OS Software", "range": "10.2(6)" }, { "product": "Cisco NX-OS Software", "range": "10.3(3w)" }, { "product": "Cisco NX-OS Software", "range": "10.3(99x)" }, { "product": "Cisco NX-OS Software", "range": "10.3(3o)" }, { "product": "Cisco NX-OS Software", "range": "8.4(9)" }, { "product": "Cisco NX-OS Software", "range": "10.3(4)" }, { "product": "Cisco NX-OS Software", "range": "10.3(3p)" }, { "product": "Cisco NX-OS Software", "range": "10.3(4a)" }, { "product": "Cisco NX-OS Software", "range": "9.4(1a)" }, { "product": "Cisco NX-OS Software", "range": "10.4(2)" }, { "product": "Cisco NX-OS Software", "range": "10.3(3q)" }, { "product": "Cisco NX-OS Software", "range": "9.3(13)" }, { "product": "Cisco NX-OS Software", "range": "8.2(11)" }, { "product": "Cisco NX-OS Software", "range": "9.4(2)" }, { "product": "Cisco NX-OS Software", "range": "10.3(5)" }, { "product": "Cisco NX-OS Software", "range": "10.2(7)" }, { "product": "Cisco NX-OS Software", "range": "10.3(3x)" }, { "product": "Cisco NX-OS Software", "range": "10.3(4g)" }, { "product": "Cisco NX-OS Software", "range": "10.2(8)" }, { "product": "Cisco NX-OS Software", "range": "10.3(3r)" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20399.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20399", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-20399", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cmd-injection-xD9OhyOP", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20399", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-07-01T16:11:44.028Z", "modifiedAt": "2025-10-21T18:43:58.429Z", "fetchedAt": "2026-10-24T05:15:52.594Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of arguments that are passed to specific configuration CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected configuration CLI command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of root.\r\nNote: To successfully exploit this vulnerability on a Cisco NX-OS device, an attacker must have Administrator credentials. The following Cisco devices already allow administrative users to access the underlying operating system through the bash-shell feature, so, for these devices, this vulnerability does not grant any additional privileges:\r\n\r\nNexus 3000 Series Switches\r\nNexus 7000 Series Switches that are running Cisco NX-OS Software releases 8.1(1) and later\r\nNexus 9000 Series Switches in standalone NX-OS mode", "sourceTitle": "Cisco NX-OS Software CLI Command Injection Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Cisco", "product": "Cisco NX-OS Software", "versions": [ { "version": "8.2(5)", "status": "affected" }, { "version": "7.3(6)N1(1a)", "status": "affected" }, { "version": "7.3(5)D1(1)", "status": "affected" }, { "version": "8.4(2)", "status": "affected" }, { "version": "7.3(6)N1(1)", "status": "affected" }, { "version": "6.2(2)", "status": "affected" }, { "version": "8.4(3)", "status": "affected" }, { "version": "9.2(3)", "status": "affected" }, { "version": "7.0(3)I5(2)", "status": "affected" }, { "version": "8.2(1)", "status": "affected" }, { "version": "6.0(2)A8(7a)", "status": "affected" }, { "version": "7.0(3)I4(5)", "status": "affected" }, { "version": "6.0(2)A6(1)", "status": "affected" }, { "version": "7.3(1)D1(1)", "status": "affected" }, { "version": "6.2(14a)", "status": "affected" }, { "version": "7.0(3)I4(6)", "status": "affected" }, { "version": "7.3(4)N1(1)", "status": "affected" }, { "version": "7.0(3)I4(3)", "status": "affected" }, { "version": "9.2(2v)", "status": "affected" }, { "version": "6.0(2)A6(5b)", "status": "affected" }, { "version": "7.3(0)D1(1)", "status": "affected" }, { "version": "6.2(17a)", "status": "affected" }, { "version": "7.0(3)I4(7)", "status": "affected" }, { "version": "6.0(2)U6(1a)", "status": "affected" }, { "version": "7.1(5)N1(1b)", "status": "affected" }, { "version": "7.0(3)I4(1)", "status": "affected" }, { "version": "7.0(3)I4(8)", "status": "affected" }, { "version": "7.0(3)I4(2)", "status": "affected" }, { "version": "7.1(4)N1(1c)", "status": "affected" }, { "version": "7.0(3)IM3(1)", "status": "affected" }, { "version": "6.0(2)U6(5a)", "status": "affected" }, { "version": "6.0(2)A8(11)", "status": "affected" }, { "version": "6.0(2)A6(4a)", "status": "affected" }, { "version": "6.2(9)", "status": "affected" }, { "version": "6.2(5)", "status": "affected" }, { "version": "7.3(4)D1(1)", "status": "affected" }, { "version": "6.2(20)", "status": "affected" }, { "version": "9.2(1)", "status": "affected" }, { "version": "9.2(2t)", "status": "affected" }, { "version": "9.2(3y)", "status": "affected" }, { "version": "7.0(3)I4(1t)", "status": "affected" }, { "version": "6.0(2)U6(5c)", "status": "affected" }, { "version": "6.0(2)A6(4)", "status": "affected" }, { "version": "7.0(3)I7(6z)", "status": "affected" }, { "version": "9.3(2)", "status": "affected" }, { "version": "7.3(1)DY(1)", "status": "affected" }, { "version": "7.0(3)F3(3)", "status": "affected" }, { "version": "6.0(2)U6(6)", "status": "affected" }, { "version": "6.2(29)", "status": "affected" }, { "version": "7.0(3)I7(3z)", "status": "affected" }, { "version": "7.0(3)IM7(2)", "status": "affected" }, { "version": "6.0(2)A8(11b)", "status": "affected" }, { "version": "6.2(9a)", "status": "affected" }, { "version": "7.3(0)N1(1)", "status": "affected" }, { "version": "7.0(3)I7(5a)", "status": "affected" }, { "version": "6.2(11d)", "status": "affected" }, { "version": "8.1(1)", "status": "affected" }, { "version": "7.0(3)I6(1)", "status": "affected" }, { "version": "6.0(2)U6(10)", "status": "affected" }, { "version": "7.2(2)D1(2)", "status": "affected" }, { "version": "7.0(3)IM3(2)", "status": "affected" }, { "version": "6.0(2)A6(8)", "status": "affected" }, { "version": "8.2(2)", "status": "affected" }, { "version": "6.0(2)U6(1)", "status": "affected" }, { "version": "7.3(2)N1(1c)", "status": "affected" }, { "version": "7.0(3)I5(3b)", "status": "affected" }, { "version": "8.3(2)", "status": "affected" }, { "version": "7.3(5)N1(1)", "status": "affected" }, { "version": "6.0(2)A6(2a)", "status": "affected" }, { "version": "7.3(2)N1(1b)", "status": "affected" }, { "version": "6.2(27)", "status": "affected" }, { "version": "7.3(2)D1(3a)", "status": "affected" }, { "version": "7.3(1)N1(1)", "status": "affected" }, { "version": "6.0(2)U6(7)", "status": "affected" }, { "version": "9.2(4)", "status": "affected" }, { "version": "7.1(4)N1(1a)", "status": "affected" }, { "version": "7.1(3)N1(4)", "status": "affected" }, { "version": "7.0(3)IM3(2a)", "status": "affected" }, { "version": "6.2(8b)", "status": "affected" }, { "version": "6.0(2)A8(10)", "status": "affected" }, { "version": "7.1(3)N1(2)", "status": "affected" }, { "version": "6.2(13)", "status": "affected" }, { "version": "6.0(2)A8(2)", "status": "affected" }, { "version": "7.0(3)IC4(4)", "status": "affected" }, { "version": "6.2(1)", "status": "affected" }, { "version": "7.3(4)N1(1a)", "status": "affected" }, { "version": "8.1(2)", "status": "affected" }, { "version": "6.0(2)A6(3)", "status": "affected" }, { "version": "6.0(2)U6(5b)", "status": "affected" }, { "version": "7.0(3)F3(3c)", "status": "affected" }, { "version": "7.3(3)D1(1)", "status": "affected" }, { "version": "7.0(3)F3(1)", "status": "affected" }, { "version": "6.0(2)U6(5)", "status": "affected" }, { "version": "7.0(3)F3(5)", "status": "affected" }, { "version": "7.1(2)N1(1)", "status": "affected" }, { "version": "7.1(3)N1(3)", "status": "affected" }, { "version": "8.2(3)", "status": "affected" }, { "version": "6.0(2)A6(7)", "status": "affected" }, { "version": "7.0(3)I7(2)", "status": "affected" }, { "version": "6.2(5a)", "status": "affected" }, { "version": "6.2(18)", "status": "affected" }, { "version": "6.0(2)A6(5)", "status": "affected" }, { "version": "7.0(3)IM3(2b)", "status": "affected" }, { "version": "7.1(3)N1(1)", "status": "affected" }, { "version": "6.0(2)U6(4a)", "status": "affected" }, { "version": "7.0(3)I5(3)", "status": "affected" }, { "version": "7.0(3)I7(3)", "status": "affected" }, { "version": "6.0(2)A8(6)", "status": "affected" }, { "version": "7.0(3)I6(2)", "status": "affected" }, { "version": "8.3(1)", "status": "affected" }, { "version": "6.2(3)", "status": "affected" }, { "version": "6.2(22)", "status": "affected" }, { "version": "7.1(1)N1(1)", "status": "affected" }, { "version": "8.4(1)", "status": "affected" }, { "version": "8.1(1b)", "status": "affected" }, { "version": "7.3(0)N1(1b)", "status": "affected" }, { "version": "7.2(2)D1(4)", "status": "affected" }, { "version": "6.0(2)A8(5)", "status": "affected" }, { "version": "7.3(0)DX(1)", "status": "affected" }, { "version": "7.1(4)N1(1d)", "status": "affected" }, { "version": "7.3(2)D1(1)", "status": "affected" }, { "version": "7.3(2)N1(1)", "status": "affected" }, { "version": "6.0(2)U6(8)", "status": "affected" }, { "version": "7.1(1)N1(1a)", "status": "affected" }, { "version": "7.0(3)IM3(3)", "status": "affected" }, { "version": "9.3(1)", "status": "affected" }, { "version": "6.0(2)U6(2)", "status": "affected" }, { "version": "6.2(9b)", "status": "affected" }, { "version": "7.1(3)N1(2a)", "status": "affected" }, { "version": "7.3(0)N1(1a)", "status": "affected" }, { "version": "6.0(2)A8(7)", "status": "affected" }, { "version": "7.0(3)I7(6)", "status": "affected" }, { "version": "7.3(2)D1(2)", "status": "affected" }, { "version": "6.2(25)", "status": "affected" }, { "version": "6.0(2)U6(3a)", "status": "affected" }, { "version": "8.0(1)", "status": "affected" }, { "version": "6.0(2)A8(11a)", "status": "affected" }, { "version": "6.2(11e)", "status": "affected" }, { "version": "7.1(3)N1(5)", "status": "affected" }, { "version": "7.0(3)I4(8z)", "status": "affected" }, { "version": "6.2(11)", "status": "affected" }, { "version": "7.0(3)I4(9)", "status": "affected" }, { "version": "6.2(16)", "status": "affected" }, { "version": "6.2(19)", "status": "affected" }, { "version": "8.2(4)", "status": "affected" }, { "version": "6.2(2a)", "status": "affected" }, { "version": "7.2(2)D1(3)", "status": "affected" }, { "version": "7.1(0)N1(1b)", "status": "affected" }, { "version": "7.0(3)I7(4)", "status": "affected" }, { "version": "7.0(3)I7(7)", "status": "affected" }, { "version": "6.2(5b)", "status": "affected" }, { "version": "7.3(0)DY(1)", "status": "affected" }, { "version": "6.0(2)A8(9)", "status": "affected" }, { "version": "6.0(2)A8(1)", "status": "affected" }, { "version": "7.1(5)N1(1)", "status": "affected" }, { "version": "7.2(1)D1(1)", "status": "affected" }, { "version": "6.2(15)", "status": "affected" }, { "version": "6.0(2)A6(6)", "status": "affected" }, { "version": "6.0(2)A8(10a)", "status": "affected" }, { "version": "7.0(3)I5(1)", "status": "affected" }, { "version": "9.3(1z)", "status": "affected" }, { "version": "9.2(2)", "status": "affected" }, { "version": "6.2(7)", "status": "affected" }, { "version": "6.2(9c)", "status": "affected" }, { "version": "7.0(3)F3(4)", "status": "affected" }, { "version": "7.3(3)N1(1)", "status": "affected" }, { "version": "6.2(6b)", "status": "affected" }, { "version": "7.0(3)I4(8b)", "status": "affected" }, { "version": "8.1(2a)", "status": "affected" }, { "version": "7.3(2)D1(3)", "status": "affected" }, { "version": "6.2(8)", "status": "affected" }, { "version": "6.0(2)A8(3)", "status": "affected" }, { "version": "6.2(11b)", "status": "affected" }, { "version": "7.0(3)I4(6t)", "status": "affected" }, { "version": "7.0(3)I5(3a)", "status": "affected" }, { "version": "8.1(1a)", "status": "affected" }, { "version": "6.2(13a)", "status": "affected" }, { "version": "6.0(2)A8(8)", "status": "affected" }, { "version": "7.0(3)I7(5)", "status": "affected" }, { "version": "7.0(3)F3(3a)", "status": "affected" }, { "version": "7.1(0)N1(1a)", "status": "affected" }, { "version": "6.0(2)A8(4)", "status": "affected" }, { "version": "6.0(2)A6(3a)", "status": "affected" }, { "version": "6.0(2)A6(5a)", "status": "affected" }, { "version": "7.0(3)F2(1)", "status": "affected" }, { "version": "7.0(3)I4(8a)", "status": "affected" }, { "version": "6.0(2)U6(9)", "status": "affected" }, { "version": "7.0(3)F3(2)", "status": "affected" }, { "version": "6.0(2)U6(2a)", "status": "affected" }, { "version": "6.2(12)", "status": "affected" }, { "version": "6.2(17)", "status": "affected" }, { "version": "7.0(3)I4(4)", "status": "affected" }, { "version": "6.2(23)", "status": "affected" }, { "version": "6.2(13b)", "status": "affected" }, { "version": "6.0(2)U6(3)", "status": "affected" }, { "version": "6.2(10)", "status": "affected" }, { "version": "6.2(6a)", "status": "affected" }, { "version": "6.2(6)", "status": "affected" }, { "version": "7.1(2)N1(1a)", "status": "affected" }, { "version": "6.2(14)", "status": "affected" }, { "version": "7.0(3)I7(1)", "status": "affected" }, { "version": "6.2(14b)", "status": "affected" }, { "version": "6.2(21)", "status": "affected" }, { "version": "7.2(2)D1(1)", "status": "affected" }, { "version": "7.0(3)F2(2)", "status": "affected" }, { "version": "7.0(3)IA7(2)", "status": "affected" }, { "version": "7.0(3)IA7(1)", "status": "affected" }, { "version": "6.0(2)A8(7b)", "status": "affected" }, { "version": "6.2(8a)", "status": "affected" }, { "version": "6.2(11c)", "status": "affected" }, { "version": "7.0(3)F1(1)", "status": "affected" }, { "version": "6.0(2)A6(1a)", "status": "affected" }, { "version": "7.1(0)N1(1)", "status": "affected" }, { "version": "7.2(0)D1(1)", "status": "affected" }, { "version": "6.0(2)A6(2)", "status": "affected" }, { "version": "7.1(4)N1(1)", "status": "affected" }, { "version": "6.0(2)A8(4a)", "status": "affected" }, { "version": "6.2(20a)", "status": "affected" }, { "version": "6.0(2)U6(4)", "status": "affected" }, { "version": "8.4(1a)", "status": "affected" }, { "version": "9.3(3)", "status": "affected" }, { "version": "7.3(2)D1(1d)", "status": "affected" }, { "version": "7.3(7)N1(1)", "status": "affected" }, { "version": "6.2(24)", "status": "affected" }, { "version": "6.2(31)", "status": "affected" }, { "version": "7.0(3)I7(8)", "status": "affected" }, { "version": "6.0(2)U6(10a)", "status": "affected" }, { "version": "7.3(7)N1(1a)", "status": "affected" }, { "version": "9.3(4)", "status": "affected" }, { "version": "7.3(6)D1(1)", "status": "affected" }, { "version": "6.2(26)", "status": "affected" }, { "version": "8.2(6)", "status": "affected" }, { "version": "6.2(33)", "status": "affected" }, { "version": "9.3(5)", "status": "affected" }, { "version": "8.4(2a)", "status": "affected" }, { "version": "8.4(2b)", "status": "affected" }, { "version": "7.3(8)N1(1)", "status": "affected" }, { "version": "7.0(3)I7(9)", "status": "affected" }, { "version": "7.3(7)N1(1b)", "status": "affected" }, { "version": "6.2(24a)", "status": "affected" }, { "version": "8.5(1)", "status": "affected" }, { "version": "9.3(6)", "status": "affected" }, { "version": "10.1(2)", "status": "affected" }, { "version": "10.1(1)", "status": "affected" }, { "version": "8.4(4)", "status": "affected" }, { "version": "7.3(7)D1(1)", "status": "affected" }, { "version": "8.4(2c)", "status": "affected" }, { "version": "9.3(5w)", "status": "affected" }, { "version": "8.2(7)", "status": "affected" }, { "version": "7.3(9)N1(1)", "status": "affected" }, { "version": "9.3(7)", "status": "affected" }, { "version": "9.3(7k)", "status": "affected" }, { "version": "7.0(3)I7(9w)", "status": "affected" }, { "version": "10.2(1)", "status": "affected" }, { "version": "7.3(8)N1(1a)", "status": "affected" }, { "version": "7.3(8)D1(1)", "status": "affected" }, { "version": "9.3(7a)", "status": "affected" }, { "version": "8.2(7a)", "status": "affected" }, { "version": "9.3(8)", "status": "affected" }, { "version": "8.4(4a)", "status": "affected" }, { "version": "8.4(2d)", "status": "affected" }, { "version": "7.3(10)N1(1)", "status": "affected" }, { "version": "8.4(5)", "status": "affected" }, { "version": "7.0(3)I7(10)", "status": "affected" }, { "version": "7.3(8)N1(1b)", "status": "affected" }, { "version": "8.2(8)", "status": "affected" }, { "version": "10.2(1q)", "status": "affected" }, { "version": "10.2(2)", "status": "affected" }, { "version": "9.3(9)", "status": "affected" }, { "version": "7.3(9)D1(1)", "status": "affected" }, { "version": "7.3(11)N1(1)", "status": "affected" }, { "version": "10.2(3)", "status": "affected" }, { "version": "8.4(6)", "status": "affected" }, { "version": "8.4(2e)", "status": "affected" }, { "version": "9.3(10)", "status": "affected" }, { "version": "7.3(11)N1(1a)", "status": "affected" }, { "version": "10.2(2a)", "status": "affected" }, { "version": "7.3(12)N1(1)", "status": "affected" }, { "version": "9.2(1a)", "status": "affected" }, { "version": "8.2(9)", "status": "affected" }, { "version": "10.3(1)", "status": "affected" }, { "version": "10.2(4)", "status": "affected" }, { "version": "7.3(13)N1(1)", "status": "affected" }, { "version": "8.4(7)", "status": "affected" }, { "version": "10.3(2)", "status": "affected" }, { "version": "8.4(6a)", "status": "affected" }, { "version": "9.3(11)", "status": "affected" }, { "version": "10.3(3)", "status": "affected" }, { "version": "10.2(5)", "status": "affected" }, { "version": "9.4(1)", "status": "affected" }, { "version": "9.3(2a)", "status": "affected" }, { "version": "8.4(2f)", "status": "affected" }, { "version": "8.2(10)", "status": "affected" }, { "version": "9.3(12)", "status": "affected" }, { "version": "10.4(1)", "status": "affected" }, { "version": "8.4(8)", "status": "affected" }, { "version": "10.3(99w)", "status": "affected" }, { "version": "7.3(14)N1(1)", "status": "affected" }, { "version": "10.2(6)", "status": "affected" }, { "version": "10.3(3w)", "status": "affected" }, { "version": "10.3(99x)", "status": "affected" }, { "version": "10.3(3o)", "status": "affected" }, { "version": "8.4(9)", "status": "affected" }, { "version": "10.3(4)", "status": "affected" }, { "version": "10.3(3p)", "status": "affected" }, { "version": "10.3(4a)", "status": "affected" }, { "version": "9.4(1a)", "status": "affected" }, { "version": "10.4(2)", "status": "affected" }, { "version": "10.3(3q)", "status": "affected" }, { "version": "9.3(13)", "status": "affected" }, { "version": "8.2(11)", "status": "affected" }, { "version": "9.4(2)", "status": "affected" }, { "version": "10.3(5)", "status": "affected" }, { "version": "10.2(7)", "status": "affected" }, { "version": "10.3(3x)", "status": "affected" }, { "version": "10.3(4g)", "status": "affected" }, { "version": "10.2(8)", "status": "affected" }, { "version": "10.3(3r)", "status": "affected" } ], "defaultStatus": "unknown" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-20399", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20399.json", "fetchedAt": "2026-10-24T05:15:52.594Z", "publishedAt": "2024-07-01T16:11:44.028Z", "modifiedAt": "2025-10-21T18:43:58.429Z", "state": "published", "provider": "cisco", "title": "Cisco NX-OS Software CLI Command Injection Vulnerability", "descriptions": [ { "lang": "en", "value": "A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of arguments that are passed to specific configuration CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected configuration CLI command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of root.\r\nNote: To successfully exploit this vulnerability on a Cisco NX-OS device, an attacker must have Administrator credentials. The following Cisco devices already allow administrative users to access the underlying operating system through the bash-shell feature, so, for these devices, this vulnerability does not grant any additional privileges:\r\n\r\nNexus 3000 Series Switches\r\nNexus 7000 Series Switches that are running Cisco NX-OS Software releases 8.1(1) and later\r\nNexus 9000 Series Switches in standalone NX-OS mode", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Cisco NX-OS contains a command injection vulnerability in the command line interface (CLI) that could allow an authenticated, local attacker to execute commands as root on the underlying operating system of an affected device.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20399", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Cisco", "product": "Cisco NX-OS Software", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unknown", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "8.2(5)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "7.3(6)N1(1a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "7.3(5)D1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "8.4(2)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "7.3(6)N1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "6.2(2)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "8.4(3)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "9.2(3)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/8", "version": "7.0(3)I5(2)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/9", "version": "8.2(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/10", "version": "6.0(2)A8(7a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/11", "version": "7.0(3)I4(5)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/12", "version": "6.0(2)A6(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/13", "version": "7.3(1)D1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/14", "version": "6.2(14a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/15", "version": "7.0(3)I4(6)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/16", "version": "7.3(4)N1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/17", "version": "7.0(3)I4(3)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/18", "version": "9.2(2v)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/19", "version": "6.0(2)A6(5b)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/20", "version": "7.3(0)D1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/21", "version": "6.2(17a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/22", "version": "7.0(3)I4(7)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/23", "version": "6.0(2)U6(1a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/24", "version": "7.1(5)N1(1b)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/25", "version": "7.0(3)I4(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/26", "version": "7.0(3)I4(8)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/27", "version": "7.0(3)I4(2)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/28", "version": "7.1(4)N1(1c)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/29", "version": "7.0(3)IM3(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/30", "version": "6.0(2)U6(5a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/31", "version": "6.0(2)A8(11)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/32", "version": "6.0(2)A6(4a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/33", "version": "6.2(9)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/34", "version": "6.2(5)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/35", "version": "7.3(4)D1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/36", "version": "6.2(20)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/37", "version": "9.2(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/38", "version": "9.2(2t)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/39", "version": "9.2(3y)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/40", "version": "7.0(3)I4(1t)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/41", "version": "6.0(2)U6(5c)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/42", "version": "6.0(2)A6(4)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/43", "version": "7.0(3)I7(6z)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/44", "version": "9.3(2)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/45", "version": "7.3(1)DY(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/46", "version": "7.0(3)F3(3)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/47", "version": "6.0(2)U6(6)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/48", "version": "6.2(29)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/49", "version": "7.0(3)I7(3z)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/50", "version": "7.0(3)IM7(2)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/51", "version": "6.0(2)A8(11b)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/52", "version": "6.2(9a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/53", "version": "7.3(0)N1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/54", "version": "7.0(3)I7(5a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/55", "version": "6.2(11d)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/56", "version": "8.1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/57", "version": "7.0(3)I6(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/58", "version": "6.0(2)U6(10)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/59", "version": "7.2(2)D1(2)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/60", "version": "7.0(3)IM3(2)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/61", "version": "6.0(2)A6(8)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/62", "version": "8.2(2)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/63", "version": "6.0(2)U6(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/64", "version": "7.3(2)N1(1c)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/65", "version": "7.0(3)I5(3b)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/66", "version": "8.3(2)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/67", "version": "7.3(5)N1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/68", "version": "6.0(2)A6(2a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/69", "version": "7.3(2)N1(1b)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/70", "version": "6.2(27)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/71", "version": "7.3(2)D1(3a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/72", "version": "7.3(1)N1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/73", "version": "6.0(2)U6(7)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/74", "version": "9.2(4)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/75", "version": "7.1(4)N1(1a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/76", "version": "7.1(3)N1(4)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/77", "version": "7.0(3)IM3(2a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/78", "version": "6.2(8b)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/79", "version": "6.0(2)A8(10)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/80", "version": "7.1(3)N1(2)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/81", "version": "6.2(13)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/82", "version": "6.0(2)A8(2)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/83", "version": "7.0(3)IC4(4)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/84", "version": "6.2(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/85", "version": "7.3(4)N1(1a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/86", "version": "8.1(2)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/87", "version": "6.0(2)A6(3)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/88", "version": "6.0(2)U6(5b)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/89", "version": "7.0(3)F3(3c)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/90", "version": "7.3(3)D1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/91", "version": "7.0(3)F3(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/92", "version": "6.0(2)U6(5)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/93", "version": "7.0(3)F3(5)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/94", "version": "7.1(2)N1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/95", "version": "7.1(3)N1(3)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/96", "version": "8.2(3)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/97", "version": "6.0(2)A6(7)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/98", "version": "7.0(3)I7(2)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/99", "version": "6.2(5a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/100", "version": "6.2(18)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/101", "version": "6.0(2)A6(5)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/102", "version": "7.0(3)IM3(2b)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/103", "version": "7.1(3)N1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/104", "version": "6.0(2)U6(4a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/105", "version": "7.0(3)I5(3)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/106", "version": "7.0(3)I7(3)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/107", "version": "6.0(2)A8(6)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/108", "version": "7.0(3)I6(2)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/109", "version": "8.3(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/110", "version": "6.2(3)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/111", "version": "6.2(22)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/112", "version": "7.1(1)N1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/113", "version": "8.4(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/114", "version": "8.1(1b)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/115", "version": "7.3(0)N1(1b)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/116", "version": "7.2(2)D1(4)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/117", "version": "6.0(2)A8(5)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/118", "version": "7.3(0)DX(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/119", "version": "7.1(4)N1(1d)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/120", "version": "7.3(2)D1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/121", "version": "7.3(2)N1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/122", "version": "6.0(2)U6(8)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/123", "version": "7.1(1)N1(1a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/124", "version": "7.0(3)IM3(3)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/125", "version": "9.3(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/126", "version": "6.0(2)U6(2)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/127", "version": "6.2(9b)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/128", "version": "7.1(3)N1(2a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/129", "version": "7.3(0)N1(1a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/130", "version": "6.0(2)A8(7)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/131", "version": "7.0(3)I7(6)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/132", "version": "7.3(2)D1(2)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/133", "version": "6.2(25)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/134", "version": "6.0(2)U6(3a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/135", "version": "8.0(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/136", "version": "6.0(2)A8(11a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/137", "version": "6.2(11e)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/138", "version": "7.1(3)N1(5)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/139", "version": "7.0(3)I4(8z)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/140", "version": "6.2(11)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/141", "version": "7.0(3)I4(9)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/142", "version": "6.2(16)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/143", "version": "6.2(19)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/144", "version": "8.2(4)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/145", "version": "6.2(2a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/146", "version": "7.2(2)D1(3)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/147", "version": "7.1(0)N1(1b)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/148", "version": "7.0(3)I7(4)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/149", "version": "7.0(3)I7(7)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/150", "version": "6.2(5b)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/151", "version": "7.3(0)DY(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/152", "version": "6.0(2)A8(9)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/153", "version": "6.0(2)A8(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/154", "version": "7.1(5)N1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/155", "version": "7.2(1)D1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/156", "version": "6.2(15)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/157", "version": "6.0(2)A6(6)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/158", "version": "6.0(2)A8(10a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/159", "version": "7.0(3)I5(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/160", "version": "9.3(1z)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/161", "version": "9.2(2)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/162", "version": "6.2(7)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/163", "version": "6.2(9c)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/164", "version": "7.0(3)F3(4)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/165", "version": "7.3(3)N1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/166", "version": "6.2(6b)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/167", "version": "7.0(3)I4(8b)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/168", "version": "8.1(2a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/169", "version": "7.3(2)D1(3)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/170", "version": "6.2(8)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/171", "version": "6.0(2)A8(3)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/172", "version": "6.2(11b)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/173", "version": "7.0(3)I4(6t)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/174", "version": "7.0(3)I5(3a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/175", "version": "8.1(1a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/176", "version": "6.2(13a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/177", "version": "6.0(2)A8(8)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/178", "version": "7.0(3)I7(5)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/179", "version": "7.0(3)F3(3a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/180", "version": "7.1(0)N1(1a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/181", "version": "6.0(2)A8(4)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/182", "version": "6.0(2)A6(3a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/183", "version": "6.0(2)A6(5a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/184", "version": "7.0(3)F2(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/185", "version": "7.0(3)I4(8a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/186", "version": "6.0(2)U6(9)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/187", "version": "7.0(3)F3(2)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/188", "version": "6.0(2)U6(2a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/189", "version": "6.2(12)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/190", "version": "6.2(17)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/191", "version": "7.0(3)I4(4)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/192", "version": "6.2(23)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/193", "version": "6.2(13b)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/194", "version": "6.0(2)U6(3)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/195", "version": "6.2(10)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/196", "version": "6.2(6a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/197", "version": "6.2(6)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/198", "version": "7.1(2)N1(1a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/199", "version": "6.2(14)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/200", "version": "7.0(3)I7(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/201", "version": "6.2(14b)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/202", "version": "6.2(21)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/203", "version": "7.2(2)D1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/204", "version": "7.0(3)F2(2)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/205", "version": "7.0(3)IA7(2)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/206", "version": "7.0(3)IA7(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/207", "version": "6.0(2)A8(7b)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/208", "version": "6.2(8a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/209", "version": "6.2(11c)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/210", "version": "7.0(3)F1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/211", "version": "6.0(2)A6(1a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/212", "version": "7.1(0)N1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/213", "version": "7.2(0)D1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/214", "version": "6.0(2)A6(2)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/215", "version": "7.1(4)N1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/216", "version": "6.0(2)A8(4a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/217", "version": "6.2(20a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/218", "version": "6.0(2)U6(4)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/219", "version": "8.4(1a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/220", "version": "9.3(3)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/221", "version": "7.3(2)D1(1d)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/222", "version": "7.3(7)N1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/223", "version": "6.2(24)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/224", "version": "6.2(31)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/225", "version": "7.0(3)I7(8)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/226", "version": "6.0(2)U6(10a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/227", "version": "7.3(7)N1(1a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/228", "version": "9.3(4)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/229", "version": "7.3(6)D1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/230", "version": "6.2(26)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/231", "version": "8.2(6)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/232", "version": "6.2(33)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/233", "version": "9.3(5)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/234", "version": "8.4(2a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/235", "version": "8.4(2b)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/236", "version": "7.3(8)N1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/237", "version": "7.0(3)I7(9)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/238", "version": "7.3(7)N1(1b)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/239", "version": "6.2(24a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/240", "version": "8.5(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/241", "version": "9.3(6)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/242", "version": "10.1(2)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/243", "version": "10.1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/244", "version": "8.4(4)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/245", "version": "7.3(7)D1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/246", "version": "8.4(2c)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/247", "version": "9.3(5w)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/248", "version": "8.2(7)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/249", "version": "7.3(9)N1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/250", "version": "9.3(7)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/251", "version": "9.3(7k)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/252", "version": "7.0(3)I7(9w)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/253", "version": "10.2(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/254", "version": "7.3(8)N1(1a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/255", "version": "7.3(8)D1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/256", "version": "9.3(7a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/257", "version": "8.2(7a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/258", "version": "9.3(8)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/259", "version": "8.4(4a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/260", "version": "8.4(2d)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/261", "version": "7.3(10)N1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/262", "version": "8.4(5)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/263", "version": "7.0(3)I7(10)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/264", "version": "7.3(8)N1(1b)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/265", "version": "8.2(8)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/266", "version": "10.2(1q)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/267", "version": "10.2(2)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/268", "version": "9.3(9)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/269", "version": "7.3(9)D1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/270", "version": "7.3(11)N1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/271", "version": "10.2(3)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/272", "version": "8.4(6)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/273", "version": "8.4(2e)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/274", "version": "9.3(10)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/275", "version": "7.3(11)N1(1a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/276", "version": "10.2(2a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/277", "version": "7.3(12)N1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/278", "version": "9.2(1a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/279", "version": "8.2(9)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/280", "version": "10.3(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/281", "version": "10.2(4)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/282", "version": "7.3(13)N1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/283", "version": "8.4(7)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/284", "version": "10.3(2)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/285", "version": "8.4(6a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/286", "version": "9.3(11)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/287", "version": "10.3(3)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/288", "version": "10.2(5)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/289", "version": "9.4(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/290", "version": "9.3(2a)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/291", "version": "8.4(2f)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/292", "version": "8.2(10)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/293", "version": "9.3(12)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/294", "version": "10.4(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/295", "version": "8.4(8)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/296", "version": "10.3(99w)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/297", "version": "7.3(14)N1(1)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/298", "version": "10.2(6)", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/299", "version": "10.3(3w)", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [ { "lang": "en", "value": "In May 2024, the Cisco Product Security Incident Response Team (PSIRT) became aware of attempted exploitation of this vulnerability in the wild.", "sourcePath": "/containers/cna/exploits/0/value" } ], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-78", "lang": "en", "description": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "baseScore": 6, "baseSeverity": "MEDIUM", "provider": "cisco", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cmd-injection-xD9OhyOP", "label": "cisco-sa-nxos-cmd-injection-xD9OhyOP", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-20399", "label": "CISA KEV", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.sygnia.co/threat-reports-and-advisories/china-nexus-threat-group-velvet-ant-exploits-cisco-0-day/", "label": "CVE", "tags": [ "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20399.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Cisco\",\"product\":\"Cisco NX-OS Software\",\"versions\":[{\"version\":\"8.2(5)\",\"status\":\"affected\"},{\"version\":\"7.3(6)N1(1a)\",\"status\":\"affected\"},{\"version\":\"7.3(5)D1(1)\",\"status\":\"affected\"},{\"version\":\"8.4(2)\",\"status\":\"affected\"},{\"version\":\"7.3(6)N1(1)\",\"status\":\"affected\"},{\"version\":\"6.2(2)\",\"status\":\"affected\"},{\"version\":\"8.4(3)\",\"status\":\"affected\"},{\"version\":\"9.2(3)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I5(2)\",\"status\":\"affected\"},{\"version\":\"8.2(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(7a)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I4(5)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A6(1)\",\"status\":\"affected\"},{\"version\":\"7.3(1)D1(1)\",\"status\":\"affected\"},{\"version\":\"6.2(14a)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I4(6)\",\"status\":\"affected\"},{\"version\":\"7.3(4)N1(1)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I4(3)\",\"status\":\"affected\"},{\"version\":\"9.2(2v)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A6(5b)\",\"status\":\"affected\"},{\"version\":\"7.3(0)D1(1)\",\"status\":\"affected\"},{\"version\":\"6.2(17a)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I4(7)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(1a)\",\"status\":\"affected\"},{\"version\":\"7.1(5)N1(1b)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I4(1)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I4(8)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I4(2)\",\"status\":\"affected\"},{\"version\":\"7.1(4)N1(1c)\",\"status\":\"affected\"},{\"version\":\"7.0(3)IM3(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(5a)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(11)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A6(4a)\",\"status\":\"affected\"},{\"version\":\"6.2(9)\",\"status\":\"affected\"},{\"version\":\"6.2(5)\",\"status\":\"affected\"},{\"version\":\"7.3(4)D1(1)\",\"status\":\"affected\"},{\"version\":\"6.2(20)\",\"status\":\"affected\"},{\"version\":\"9.2(1)\",\"status\":\"affected\"},{\"version\":\"9.2(2t)\",\"status\":\"affected\"},{\"version\":\"9.2(3y)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I4(1t)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(5c)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A6(4)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I7(6z)\",\"status\":\"affected\"},{\"version\":\"9.3(2)\",\"status\":\"affected\"},{\"version\":\"7.3(1)DY(1)\",\"status\":\"affected\"},{\"version\":\"7.0(3)F3(3)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(6)\",\"status\":\"affected\"},{\"version\":\"6.2(29)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I7(3z)\",\"status\":\"affected\"},{\"version\":\"7.0(3)IM7(2)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(11b)\",\"status\":\"affected\"},{\"version\":\"6.2(9a)\",\"status\":\"affected\"},{\"version\":\"7.3(0)N1(1)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I7(5a)\",\"status\":\"affected\"},{\"version\":\"6.2(11d)\",\"status\":\"affected\"},{\"version\":\"8.1(1)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I6(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(10)\",\"status\":\"affected\"},{\"version\":\"7.2(2)D1(2)\",\"status\":\"affected\"},{\"version\":\"7.0(3)IM3(2)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A6(8)\",\"status\":\"affected\"},{\"version\":\"8.2(2)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(1)\",\"status\":\"affected\"},{\"version\":\"7.3(2)N1(1c)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I5(3b)\",\"status\":\"affected\"},{\"version\":\"8.3(2)\",\"status\":\"affected\"},{\"version\":\"7.3(5)N1(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A6(2a)\",\"status\":\"affected\"},{\"version\":\"7.3(2)N1(1b)\",\"status\":\"affected\"},{\"version\":\"6.2(27)\",\"status\":\"affected\"},{\"version\":\"7.3(2)D1(3a)\",\"status\":\"affected\"},{\"version\":\"7.3(1)N1(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(7)\",\"status\":\"affected\"},{\"version\":\"9.2(4)\",\"status\":\"affected\"},{\"version\":\"7.1(4)N1(1a)\",\"status\":\"affected\"},{\"version\":\"7.1(3)N1(4)\",\"status\":\"affected\"},{\"version\":\"7.0(3)IM3(2a)\",\"status\":\"affected\"},{\"version\":\"6.2(8b)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(10)\",\"status\":\"affected\"},{\"version\":\"7.1(3)N1(2)\",\"status\":\"affected\"},{\"version\":\"6.2(13)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(2)\",\"status\":\"affected\"},{\"version\":\"7.0(3)IC4(4)\",\"status\":\"affected\"},{\"version\":\"6.2(1)\",\"status\":\"affected\"},{\"version\":\"7.3(4)N1(1a)\",\"status\":\"affected\"},{\"version\":\"8.1(2)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A6(3)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(5b)\",\"status\":\"affected\"},{\"version\":\"7.0(3)F3(3c)\",\"status\":\"affected\"},{\"version\":\"7.3(3)D1(1)\",\"status\":\"affected\"},{\"version\":\"7.0(3)F3(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(5)\",\"status\":\"affected\"},{\"version\":\"7.0(3)F3(5)\",\"status\":\"affected\"},{\"version\":\"7.1(2)N1(1)\",\"status\":\"affected\"},{\"version\":\"7.1(3)N1(3)\",\"status\":\"affected\"},{\"version\":\"8.2(3)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A6(7)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I7(2)\",\"status\":\"affected\"},{\"version\":\"6.2(5a)\",\"status\":\"affected\"},{\"version\":\"6.2(18)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A6(5)\",\"status\":\"affected\"},{\"version\":\"7.0(3)IM3(2b)\",\"status\":\"affected\"},{\"version\":\"7.1(3)N1(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(4a)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I5(3)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I7(3)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(6)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I6(2)\",\"status\":\"affected\"},{\"version\":\"8.3(1)\",\"status\":\"affected\"},{\"version\":\"6.2(3)\",\"status\":\"affected\"},{\"version\":\"6.2(22)\",\"status\":\"affected\"},{\"version\":\"7.1(1)N1(1)\",\"status\":\"affected\"},{\"version\":\"8.4(1)\",\"status\":\"affected\"},{\"version\":\"8.1(1b)\",\"status\":\"affected\"},{\"version\":\"7.3(0)N1(1b)\",\"status\":\"affected\"},{\"version\":\"7.2(2)D1(4)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(5)\",\"status\":\"affected\"},{\"version\":\"7.3(0)DX(1)\",\"status\":\"affected\"},{\"version\":\"7.1(4)N1(1d)\",\"status\":\"affected\"},{\"version\":\"7.3(2)D1(1)\",\"status\":\"affected\"},{\"version\":\"7.3(2)N1(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(8)\",\"status\":\"affected\"},{\"version\":\"7.1(1)N1(1a)\",\"status\":\"affected\"},{\"version\":\"7.0(3)IM3(3)\",\"status\":\"affected\"},{\"version\":\"9.3(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(2)\",\"status\":\"affected\"},{\"version\":\"6.2(9b)\",\"status\":\"affected\"},{\"version\":\"7.1(3)N1(2a)\",\"status\":\"affected\"},{\"version\":\"7.3(0)N1(1a)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(7)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I7(6)\",\"status\":\"affected\"},{\"version\":\"7.3(2)D1(2)\",\"status\":\"affected\"},{\"version\":\"6.2(25)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(3a)\",\"status\":\"affected\"},{\"version\":\"8.0(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(11a)\",\"status\":\"affected\"},{\"version\":\"6.2(11e)\",\"status\":\"affected\"},{\"version\":\"7.1(3)N1(5)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I4(8z)\",\"status\":\"affected\"},{\"version\":\"6.2(11)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I4(9)\",\"status\":\"affected\"},{\"version\":\"6.2(16)\",\"status\":\"affected\"},{\"version\":\"6.2(19)\",\"status\":\"affected\"},{\"version\":\"8.2(4)\",\"status\":\"affected\"},{\"version\":\"6.2(2a)\",\"status\":\"affected\"},{\"version\":\"7.2(2)D1(3)\",\"status\":\"affected\"},{\"version\":\"7.1(0)N1(1b)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I7(4)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I7(7)\",\"status\":\"affected\"},{\"version\":\"6.2(5b)\",\"status\":\"affected\"},{\"version\":\"7.3(0)DY(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(9)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(1)\",\"status\":\"affected\"},{\"version\":\"7.1(5)N1(1)\",\"status\":\"affected\"},{\"version\":\"7.2(1)D1(1)\",\"status\":\"affected\"},{\"version\":\"6.2(15)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A6(6)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(10a)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I5(1)\",\"status\":\"affected\"},{\"version\":\"9.3(1z)\",\"status\":\"affected\"},{\"version\":\"9.2(2)\",\"status\":\"affected\"},{\"version\":\"6.2(7)\",\"status\":\"affected\"},{\"version\":\"6.2(9c)\",\"status\":\"affected\"},{\"version\":\"7.0(3)F3(4)\",\"status\":\"affected\"},{\"version\":\"7.3(3)N1(1)\",\"status\":\"affected\"},{\"version\":\"6.2(6b)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I4(8b)\",\"status\":\"affected\"},{\"version\":\"8.1(2a)\",\"status\":\"affected\"},{\"version\":\"7.3(2)D1(3)\",\"status\":\"affected\"},{\"version\":\"6.2(8)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(3)\",\"status\":\"affected\"},{\"version\":\"6.2(11b)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I4(6t)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I5(3a)\",\"status\":\"affected\"},{\"version\":\"8.1(1a)\",\"status\":\"affected\"},{\"version\":\"6.2(13a)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(8)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I7(5)\",\"status\":\"affected\"},{\"version\":\"7.0(3)F3(3a)\",\"status\":\"affected\"},{\"version\":\"7.1(0)N1(1a)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(4)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A6(3a)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A6(5a)\",\"status\":\"affected\"},{\"version\":\"7.0(3)F2(1)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I4(8a)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(9)\",\"status\":\"affected\"},{\"version\":\"7.0(3)F3(2)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(2a)\",\"status\":\"affected\"},{\"version\":\"6.2(12)\",\"status\":\"affected\"},{\"version\":\"6.2(17)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I4(4)\",\"status\":\"affected\"},{\"version\":\"6.2(23)\",\"status\":\"affected\"},{\"version\":\"6.2(13b)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(3)\",\"status\":\"affected\"},{\"version\":\"6.2(10)\",\"status\":\"affected\"},{\"version\":\"6.2(6a)\",\"status\":\"affected\"},{\"version\":\"6.2(6)\",\"status\":\"affected\"},{\"version\":\"7.1(2)N1(1a)\",\"status\":\"affected\"},{\"version\":\"6.2(14)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I7(1)\",\"status\":\"affected\"},{\"version\":\"6.2(14b)\",\"status\":\"affected\"},{\"version\":\"6.2(21)\",\"status\":\"affected\"},{\"version\":\"7.2(2)D1(1)\",\"status\":\"affected\"},{\"version\":\"7.0(3)F2(2)\",\"status\":\"affected\"},{\"version\":\"7.0(3)IA7(2)\",\"status\":\"affected\"},{\"version\":\"7.0(3)IA7(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(7b)\",\"status\":\"affected\"},{\"version\":\"6.2(8a)\",\"status\":\"affected\"},{\"version\":\"6.2(11c)\",\"status\":\"affected\"},{\"version\":\"7.0(3)F1(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A6(1a)\",\"status\":\"affected\"},{\"version\":\"7.1(0)N1(1)\",\"status\":\"affected\"},{\"version\":\"7.2(0)D1(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A6(2)\",\"status\":\"affected\"},{\"version\":\"7.1(4)N1(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(4a)\",\"status\":\"affected\"},{\"version\":\"6.2(20a)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(4)\",\"status\":\"affected\"},{\"version\":\"8.4(1a)\",\"status\":\"affected\"},{\"version\":\"9.3(3)\",\"status\":\"affected\"},{\"version\":\"7.3(2)D1(1d)\",\"status\":\"affected\"},{\"version\":\"7.3(7)N1(1)\",\"status\":\"affected\"},{\"version\":\"6.2(24)\",\"status\":\"affected\"},{\"version\":\"6.2(31)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I7(8)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(10a)\",\"status\":\"affected\"},{\"version\":\"7.3(7)N1(1a)\",\"status\":\"affected\"},{\"version\":\"9.3(4)\",\"status\":\"affected\"},{\"version\":\"7.3(6)D1(1)\",\"status\":\"affected\"},{\"version\":\"6.2(26)\",\"status\":\"affected\"},{\"version\":\"8.2(6)\",\"status\":\"affected\"},{\"version\":\"6.2(33)\",\"status\":\"affected\"},{\"version\":\"9.3(5)\",\"status\":\"affected\"},{\"version\":\"8.4(2a)\",\"status\":\"affected\"},{\"version\":\"8.4(2b)\",\"status\":\"affected\"},{\"version\":\"7.3(8)N1(1)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I7(9)\",\"status\":\"affected\"},{\"version\":\"7.3(7)N1(1b)\",\"status\":\"affected\"},{\"version\":\"6.2(24a)\",\"status\":\"affected\"},{\"version\":\"8.5(1)\",\"status\":\"affected\"},{\"version\":\"9.3(6)\",\"status\":\"affected\"},{\"version\":\"10.1(2)\",\"status\":\"affected\"},{\"version\":\"10.1(1)\",\"status\":\"affected\"},{\"version\":\"8.4(4)\",\"status\":\"affected\"},{\"version\":\"7.3(7)D1(1)\",\"status\":\"affected\"},{\"version\":\"8.4(2c)\",\"status\":\"affected\"},{\"version\":\"9.3(5w)\",\"status\":\"affected\"},{\"version\":\"8.2(7)\",\"status\":\"affected\"},{\"version\":\"7.3(9)N1(1)\",\"status\":\"affected\"},{\"version\":\"9.3(7)\",\"status\":\"affected\"},{\"version\":\"9.3(7k)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I7(9w)\",\"status\":\"affected\"},{\"version\":\"10.2(1)\",\"status\":\"affected\"},{\"version\":\"7.3(8)N1(1a)\",\"status\":\"affected\"},{\"version\":\"7.3(8)D1(1)\",\"status\":\"affected\"},{\"version\":\"9.3(7a)\",\"status\":\"affected\"},{\"version\":\"8.2(7a)\",\"status\":\"affected\"},{\"version\":\"9.3(8)\",\"status\":\"affected\"},{\"version\":\"8.4(4a)\",\"status\":\"affected\"},{\"version\":\"8.4(2d)\",\"status\":\"affected\"},{\"version\":\"7.3(10)N1(1)\",\"status\":\"affected\"},{\"version\":\"8.4(5)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I7(10)\",\"status\":\"affected\"},{\"version\":\"7.3(8)N1(1b)\",\"status\":\"affected\"},{\"version\":\"8.2(8)\",\"status\":\"affected\"},{\"version\":\"10.2(1q)\",\"status\":\"affected\"},{\"version\":\"10.2(2)\",\"status\":\"affected\"},{\"version\":\"9.3(9)\",\"status\":\"affected\"},{\"version\":\"7.3(9)D1(1)\",\"status\":\"affected\"},{\"version\":\"7.3(11)N1(1)\",\"status\":\"affected\"},{\"version\":\"10.2(3)\",\"status\":\"affected\"},{\"version\":\"8.4(6)\",\"status\":\"affected\"},{\"version\":\"8.4(2e)\",\"status\":\"affected\"},{\"version\":\"9.3(10)\",\"status\":\"affected\"},{\"version\":\"7.3(11)N1(1a)\",\"status\":\"affected\"},{\"version\":\"10.2(2a)\",\"status\":\"affected\"},{\"version\":\"7.3(12)N1(1)\",\"status\":\"affected\"},{\"version\":\"9.2(1a)\",\"status\":\"affected\"},{\"version\":\"8.2(9)\",\"status\":\"affected\"},{\"version\":\"10.3(1)\",\"status\":\"affected\"},{\"version\":\"10.2(4)\",\"status\":\"affected\"},{\"version\":\"7.3(13)N1(1)\",\"status\":\"affected\"},{\"version\":\"8.4(7)\",\"status\":\"affected\"},{\"version\":\"10.3(2)\",\"status\":\"affected\"},{\"version\":\"8.4(6a)\",\"status\":\"affected\"},{\"version\":\"9.3(11)\",\"status\":\"affected\"},{\"version\":\"10.3(3)\",\"status\":\"affected\"},{\"version\":\"10.2(5)\",\"status\":\"affected\"},{\"version\":\"9.4(1)\",\"status\":\"affected\"},{\"version\":\"9.3(2a)\",\"status\":\"affected\"},{\"version\":\"8.4(2f)\",\"status\":\"affected\"},{\"version\":\"8.2(10)\",\"status\":\"affected\"},{\"version\":\"9.3(12)\",\"status\":\"affected\"},{\"version\":\"10.4(1)\",\"status\":\"affected\"},{\"version\":\"8.4(8)\",\"status\":\"affected\"},{\"version\":\"10.3(99w)\",\"status\":\"affected\"},{\"version\":\"7.3(14)N1(1)\",\"status\":\"affected\"},{\"version\":\"10.2(6)\",\"status\":\"affected\"},{\"version\":\"10.3(3w)\",\"status\":\"affected\"},{\"version\":\"10.3(99x)\",\"status\":\"affected\"},{\"version\":\"10.3(3o)\",\"status\":\"affected\"},{\"version\":\"8.4(9)\",\"status\":\"affected\"},{\"version\":\"10.3(4)\",\"status\":\"affected\"},{\"version\":\"10.3(3p)\",\"status\":\"affected\"},{\"version\":\"10.3(4a)\",\"status\":\"affected\"},{\"version\":\"9.4(1a)\",\"status\":\"affected\"},{\"version\":\"10.4(2)\",\"status\":\"affected\"},{\"version\":\"10.3(3q)\",\"status\":\"affected\"},{\"version\":\"9.3(13)\",\"status\":\"affected\"},{\"version\":\"8.2(11)\",\"status\":\"affected\"},{\"version\":\"9.4(2)\",\"status\":\"affected\"},{\"version\":\"10.3(5)\",\"status\":\"affected\"},{\"version\":\"10.2(7)\",\"status\":\"affected\"},{\"version\":\"10.3(3x)\",\"status\":\"affected\"},{\"version\":\"10.3(4g)\",\"status\":\"affected\"},{\"version\":\"10.2(8)\",\"status\":\"affected\"},{\"version\":\"10.3(3r)\",\"status\":\"affected\"}],\"defaultStatus\":\"unknown\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20399.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of arguments that are passed to specific configuration CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected configuration CLI command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of root.\r\nNote: To successfully exploit this vulnerability on a Cisco NX-OS device, an attacker must have Administrator credentials. The following Cisco devices already allow administrative users to access the underlying operating system through the bash-shell feature, so, for these devices, this vulnerability does not grant any additional privileges:\r\n\r\nNexus 3000 Series Switches\r\nNexus 7000 Series Switches that are running Cisco NX-OS Software releases 8.1(1) and later\r\nNexus 9000 Series Switches in standalone NX-OS mode", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/exploits/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20399.json", "sourcePath": "/containers/cna/exploits/0/value", "text": "In May 2024, the Cisco Product Security Incident Response Team (PSIRT) became aware of attempted exploitation of this vulnerability in the wild.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20399.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\",\"type\":\"cwe\",\"cweId\":\"CWE-78\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20399.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N\",\"baseScore\":6,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-20399:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20399", "sourcePath": "retained:/originalText", "text": "Cisco NX-OS contains a command injection vulnerability in the command line interface (CLI) that could allow an authenticated, local attacker to execute commands as root on the underlying operating system of an affected device.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-20399:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20399", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "bounded", "truncatedFields": [ "/containers/cna/affected/0/versions" ], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20399", "modifiedAt": "2024-07-02T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T18:43:58.429Z", "fetchedAt": "2026-10-24T05:15:52.594Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-07-02T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Cisco NX-OS Softwareにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:15:52.594Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "708238a0cedd3ba8c6c44abd65fe3dfcb050e6361b74c108c1310617faaf61da", "sourceModifiedAt": "2025-10-21T18:43:58.429Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Cisco NX-OS Software の CLI において、管理者権限を持つ認証ユーザーが特定の設定コマンドに細工した引数を与えると、根本的なオペレーティングシステム上で root 権限の任意コマンドを実行できる可能性があります。", "risk": "攻撃者が成功すると、対象デバイスの基盤 OS 上で root 権限で任意のコマンドを実行できるようになります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E3" ], "applicability": [ { "text": "攻撃者は管理者権限の認証情報（Administrator クレデンシャル）を保持している必要があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20399.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "攻撃には、影響を受ける特定の設定 CLI コマンドに細工した引数を入力できることが前提です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20399.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "Nexus 3000 シリーズ、Nexus 7000 シリーズ（Cisco NX-OS 8.1(1) 以降）、Nexus 9000 シリーズのスタンドアロン NX-OS モードでは、既に管理者ユーザーが bash-shell 機能を通じて OS にアクセスできるため、本脆弱性は追加の特権を付与しません。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20399.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Cisco / Cisco NX-OS Software。影響ありとして記載：8.2(5)。影響ありとして記載：7.3(6)N1(1a)。影響ありとして記載：7.3(5)D1(1)。影響ありとして記載：8.4(2)。影響ありとして記載：7.3(6)N1(1)。影響ありとして記載：6.2(2)。影響ありとして記載：8.4(3)。影響ありとして記載：9.2(3)。影響ありとして記載：7.0(3)I5(2)。影響ありとして記載：8.2(1)。影響ありとして記載：6.0(2)A8(7a)。影響ありとして記載：7.0(3)I4(5)。影響ありとして記載：6.0(2)A6(1)。影響ありとして記載：7.3(1)D1(1)。影響ありとして記載：6.2(14a)。影響ありとして記載：7.0(3)I4(6)。影響ありとして記載：7.3(4)N1(1)。影響ありとして記載：7.0(3)I4(3)。影響ありとして記載：9.2(2v)。影響ありとして記載：6.0(2)A6(5b)。影響ありとして記載：7.3(0)D1(1)。影響ありとして記載：6.2(17a)。影響ありとして記載：7.0(3)I4(7)。影響ありとして記載：6.0(2)U6(1a)。影響ありとして記載：7.1(5)N1(1b)。影響ありとして記載：7.0(3)I4(1)。影響ありとして記載：7.0(3)I4(8)。影響ありとして記載：7.0(3)I4(2)。影響ありとして記載：7.1(4)N1(1c)。影響ありとして記載：7.0(3)IM3(1)。影響ありとして記載：6.0(2)U6(5a)。影響ありとして記載：6.0(2)A8(11)。影響ありとして記載：6.0(2)A6(4a)。影響ありとして記載：6.2(9)。影響ありとして記載：6.2(5)。影響ありとして記載：7.3(4)D1(1)。影響ありとして記載：6.2(20)。影響ありとして記載：9.2(1)。影響ありとして記載：9.2(2t)。影響ありとして記載：9.2(3y)。影響ありとして記載：7.0(3)I4(1t)。影響ありとして記載：6.0(2)U6(5c)。影響ありとして記載：6.0(2)A6(4)。影響ありとして記載：7.0(3)I7(6z)。影響ありとして記載：9.3(2)。影響ありとして記載：7.3(1)DY(1)。影響ありとして記載：7.0(3)F3(3)。影響ありとして記載：6.0(2)U6(6)。影響ありとして記載：6.2(29)。影響ありとして記載：7.0(3)I7(3z)。影響ありとして記載：7.0(3)IM7(2)。影響ありとして記載：6.0(2)A8(11b)。影響ありとして記載：6.2(9a)。影響ありとして記載：7.3(0)N1(1)。影響ありとして記載：7.0(3)I7(5a)。影響ありとして記載：6.2(11d)。影響ありとして記載：8.1(1)。影響ありとして記載：7.0(3)I6(1)。影響ありとして記載：6.0(2)U6(10)。影響ありとして記載：7.2(2)D1(2)。影響ありとして記載：7.0(3)IM3(2)。影響ありとして記載：6.0(2)A6(8)。影響ありとして記載：8.2(2)。影響ありとして記載：6.0(2)U6(1)。影響ありとして記載：7.3(2)N1(1c)。影響ありとして記載：7.0(3)I5(3b)。影響ありとして記載：8.3(2)。影響ありとして記載：7.3(5)N1(1)。影響ありとして記載：6.0(2)A6(2a)。影響ありとして記載：7.3(2)N1(1b)。影響ありとして記載：6.2(27)。影響ありとして記載：7.3(2)D1(3a)。影響ありとして記載：7.3(1)N1(1)。影響ありとして記載：6.0(2)U6(7)。影響ありとして記載：9.2(4)。影響ありとして記載：7.1(4)N1(1a)。影響ありとして記載：7.1(3)N1(4)。影響ありとして記載：7.0(3)IM3(2a)。影響ありとして記載：6.2(8b)。影響ありとして記載：6.0(2)A8(10)。影響ありとして記載：7.1(3)N1(2)。影響ありとして記載：6.2(13)。影響ありとして記載：6.0(2)A8(2)。影響ありとして記載：7.0(3)IC4(4)。影響ありとして記載：6.2(1)。影響ありとして記載：7.3(4)N1(1a)。影響ありとして記載：8.1(2)。影響ありとして記載：6.0(2)A6(3)。影響ありとして記載：6.0(2)U6(5b)。影響ありとして記載：7.0(3)F3(3c)。影響ありとして記載：7.3(3)D1(1)。影響ありとして記載：7.0(3)F3(1)。影響ありとして記載：6.0(2)U6(5)。影響ありとして記載：7.0(3)F3(5)。影響ありとして記載：7.1(2)N1(1)。影響ありとして記載：7.1(3)N1(3)。影響ありとして記載：8.2(3)。影響ありとして記載：6.0(2)A6(7)。影響ありとして記載：7.0(3)I7(2)。影響ありとして記載：6.2(5a)。影響ありとして記載：6.2(18)。影響ありとして記載：6.0(2)A6(5)。影響ありとして記載：7.0(3)IM3(2b)。影響ありとして記載：7.1(3)N1(1)。影響ありとして記載：6.0(2)U6(4a)。影響ありとして記載：7.0(3)I5(3)。影響ありとして記載：7.0(3)I7(3)。影響ありとして記載：6.0(2)A8(6)。影響ありとして記載：7.0(3)I6(2)。影響ありとして記載：8.3(1)。影響ありとして記載：6.2(3)。影響ありとして記載：6.2(22)。影響ありとして記載：7.1(1)N1(1)。影響ありとして記載：8.4(1)。影響ありとして記載：8.1(1b)。影響ありとして記載：7.3(0)N1(1b)。影響ありとして記載：7.2(2)D1(4)。影響ありとして記載：6.0(2)A8(5)。影響ありとして記載：7.3(0)DX(1)。影響ありとして記載：7.1(4)N1(1d)。影響ありとして記載：7.3(2)D1(1)。影響ありとして記載：7.3(2)N1(1)。影響ありとして記載：6.0(2)U6(8)。影響ありとして記載：7.1(1)N1(1a)。影響ありとして記載：7.0(3)IM3(3)。影響ありとして記載：9.3(1)。影響ありとして記載：6.0(2)U6(2)。影響ありとして記載：6.2(9b)。影響ありとして記載：7.1(3)N1(2a)。影響ありとして記載：7.3(0)N1(1a)。影響ありとして記載：6.0(2)A8(7)。影響ありとして記載：7.0(3)I7(6)。影響ありとして記載：7.3(2)D1(2)。影響ありとして記載：6.2(25)。影響ありとして記載：6.0(2)U6(3a)。影響ありとして記載：8.0(1)。影響ありとして記載：6.0(2)A8(11a)。影響ありとして記載：6.2(11e)。影響ありとして記載：7.1(3)N1(5)。影響ありとして記載：7.0(3)I4(8z)。影響ありとして記載：6.2(11)。影響ありとして記載：7.0(3)I4(9)。影響ありとして記載：6.2(16)。影響ありとして記載：6.2(19)。影響ありとして記載：8.2(4)。影響ありとして記載：6.2(2a)。影響ありとして記載：7.2(2)D1(3)。影響ありとして記載：7.1(0)N1(1b)。影響ありとして記載：7.0(3)I7(4)。影響ありとして記載：7.0(3)I7(7)。影響ありとして記載：6.2(5b)。影響ありとして記載：7.3(0)DY(1)。影響ありとして記載：6.0(2)A8(9)。影響ありとして記載：6.0(2)A8(1)。影響ありとして記載：7.1(5)N1(1)。影響ありとして記載：7.2(1)D1(1)。影響ありとして記載：6.2(15)。影響ありとして記載：6.0(2)A6(6)。影響ありとして記載：6.0(2)A8(10a)。影響ありとして記載：7.0(3)I5(1)。影響ありとして記載：9.3(1z)。影響ありとして記載：9.2(2)。影響ありとして記載：6.2(7)。影響ありとして記載：6.2(9c)。影響ありとして記載：7.0(3)F3(4)。影響ありとして記載：7.3(3)N1(1)。影響ありとして記載：6.2(6b)。影響ありとして記載：7.0(3)I4(8b)。影響ありとして記載：8.1(2a)。影響ありとして記載：7.3(2)D1(3)。影響ありとして記載：6.2(8)。影響ありとして記載：6.0(2)A8(3)。影響ありとして記載：6.2(11b)。影響ありとして記載：7.0(3)I4(6t)。影響ありとして記載：7.0(3)I5(3a)。影響ありとして記載：8.1(1a)。影響ありとして記載：6.2(13a)。影響ありとして記載：6.0(2)A8(8)。影響ありとして記載：7.0(3)I7(5)。影響ありとして記載：7.0(3)F3(3a)。影響ありとして記載：7.1(0)N1(1a)。影響ありとして記載：6.0(2)A8(4)。影響ありとして記載：6.0(2)A6(3a)。影響ありとして記載：6.0(2)A6(5a)。影響ありとして記載：7.0(3)F2(1)。影響ありとして記載：7.0(3)I4(8a)。影響ありとして記載：6.0(2)U6(9)。影響ありとして記載：7.0(3)F3(2)。影響ありとして記載：6.0(2)U6(2a)。影響ありとして記載：6.2(12)。影響ありとして記載：6.2(17)。影響ありとして記載：7.0(3)I4(4)。影響ありとして記載：6.2(23)。影響ありとして記載：6.2(13b)。影響ありとして記載：6.0(2)U6(3)。影響ありとして記載：6.2(10)。影響ありとして記載：6.2(6a)。影響ありとして記載：6.2(6)。影響ありとして記載：7.1(2)N1(1a)。影響ありとして記載：6.2(14)。影響ありとして記載：7.0(3)I7(1)。影響ありとして記載：6.2(14b)。影響ありとして記載：6.2(21)。影響ありとして記載：7.2(2)D1(1)。影響ありとして記載：7.0(3)F2(2)。影響ありとして記載：7.0(3)IA7(2)。影響ありとして記載：7.0(3)IA7(1)。影響ありとして記載：6.0(2)A8(7b)。影響ありとして記載：6.2(8a)。影響ありとして記載：6.2(11c)。影響ありとして記載：7.0(3)F1(1)。影響ありとして記載：6.0(2)A6(1a)。影響ありとして記載：7.1(0)N1(1)。影響ありとして記載：7.2(0)D1(1)。影響ありとして記載：6.0(2)A6(2)。影響ありとして記載：7.1(4)N1(1)。影響ありとして記載：6.0(2)A8(4a)。影響ありとして記載：6.2(20a)。影響ありとして記載：6.0(2)U6(4)。影響ありとして記載：8.4(1a)。影響ありとして記載：9.3(3)。影響ありとして記載：7.3(2)D1(1d)。影響ありとして記載：7.3(7)N1(1)。影響ありとして記載：6.2(24)。影響ありとして記載：6.2(31)。影響ありとして記載：7.0(3)I7(8)。影響ありとして記載：6.0(2)U6(10a)。影響ありとして記載：7.3(7)N1(1a)。影響ありとして記載：9.3(4)。影響ありとして記載：7.3(6)D1(1)。影響ありとして記載：6.2(26)。影響ありとして記載：8.2(6)。影響ありとして記載：6.2(33)。影響ありとして記載：9.3(5)。影響ありとして記載：8.4(2a)。影響ありとして記載：8.4(2b)。影響ありとして記載：7.3(8)N1(1)。影響ありとして記載：7.0(3)I7(9)。影響ありとして記載：7.3(7)N1(1b)。影響ありとして記載：6.2(24a)。影響ありとして記載：8.5(1)。影響ありとして記載：9.3(6)。影響ありとして記載：10.1(2)。影響ありとして記載：10.1(1)。影響ありとして記載：8.4(4)。影響ありとして記載：7.3(7)D1(1)。影響ありとして記載：8.4(2c)。影響ありとして記載：9.3(5w)。影響ありとして記載：8.2(7)。影響ありとして記載：7.3(9)N1(1)。影響ありとして記載：9.3(7)。影響ありとして記載：9.3(7k)。影響ありとして記載：7.0(3)I7(9w)。影響ありとして記載：10.2(1)。影響ありとして記載：7.3(8)N1(1a)。影響ありとして記載：7.3(8)D1(1)。影響ありとして記載：9.3(7a)。影響ありとして記載：8.2(7a)。影響ありとして記載：9.3(8)。影響ありとして記載：8.4(4a)。影響ありとして記載：8.4(2d)。影響ありとして記載：7.3(10)N1(1)。影響ありとして記載：8.4(5)。影響ありとして記載：7.0(3)I7(10)。影響ありとして記載：7.3(8)N1(1b)。影響ありとして記載：8.2(8)。影響ありとして記載：10.2(1q)。影響ありとして記載：10.2(2)。影響ありとして記載：9.3(9)。影響ありとして記載：7.3(9)D1(1)。影響ありとして記載：7.3(11)N1(1)。影響ありとして記載：10.2(3)。影響ありとして記載：8.4(6)。影響ありとして記載：8.4(2e)。影響ありとして記載：9.3(10)。影響ありとして記載：7.3(11)N1(1a)。影響ありとして記載：10.2(2a)。影響ありとして記載：7.3(12)N1(1)。影響ありとして記載：9.2(1a)。影響ありとして記載：8.2(9)。影響ありとして記載：10.3(1)。影響ありとして記載：10.2(4)。影響ありとして記載：7.3(13)N1(1)。影響ありとして記載：8.4(7)。影響ありとして記載：10.3(2)。影響ありとして記載：8.4(6a)。影響ありとして記載：9.3(11)。影響ありとして記載：10.3(3)。影響ありとして記載：10.2(5)。影響ありとして記載：9.4(1)。影響ありとして記載：9.3(2a)。影響ありとして記載：8.4(2f)。影響ありとして記載：8.2(10)。影響ありとして記載：9.3(12)。影響ありとして記載：10.4(1)。影響ありとして記載：8.4(8)。影響ありとして記載：10.3(99w)。影響ありとして記載：7.3(14)N1(1)。影響ありとして記載：10.2(6)。影響ありとして記載：10.3(3w)。個別に記されていない版の影響は、原資料でも未確定です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20399.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20399" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20399.json" ], "evidenceIds": [ "E4" ] }, { "text": "「Cisco NX-OS Software」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-20399", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cmd-injection-xD9OhyOP", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20399", "https://nvd.nist.gov/vuln/detail/CVE-2024-20399" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20399.json" ], "evidenceIds": [ "E4" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-20399", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cmd-injection-xD9OhyOP", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20399", "https://nvd.nist.gov/vuln/detail/CVE-2024-20399" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20399.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-20399", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cmd-injection-xD9OhyOP", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20399", "https://nvd.nist.gov/vuln/detail/CVE-2024-20399" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。", "長い公式資料の一部を使って解説しています。対象製品・版・構成の全一覧は、併記した構造化データも管理担当者と照合してください。", "公式資料が長いため、取得できた一部の内容に基づく説明です。対象の版・例外・構成条件が省略されている可能性があるため、取得範囲だけで対象外とは判断しないでください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20399.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20399", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-20399", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cmd-injection-xD9OhyOP", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20399", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20399.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of arguments that are passed to specific configuration CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected configuration CLI command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of root.\r\nNote: To successfully exploit this vulnerability on a Cisco NX-OS device, an attacker must have Administrator credentials. The following Cisco devices already allow administrative users to access the underlying operating system through the bash-shell feature, so, for these devices, this vulnerability does not grant any additional privileges:\r\n\r\nNexus 3000 Series Switches\r\nNexus 7000 Series Switches that are running Cisco NX-OS Software releases 8.1(1) and later\r\nNexus 9000 Series Switches in standalone NX-OS mode", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20399.json", "sourceField": "/containers/cna/title", "excerpt": "Cisco NX-OS Software CLI Command Injection Vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20399", "sourceField": "retained:/originalText", "excerpt": "Cisco NX-OS contains a command injection vulnerability in the command line interface (CLI) that could allow an authenticated, local attacker to execute commands as root on the underlying operating system of an affected device.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/20xxx/CVE-2024-20399.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Cisco\",\"product\":\"Cisco NX-OS Software\",\"versions\":[{\"version\":\"8.2(5)\",\"status\":\"affected\"},{\"version\":\"7.3(6)N1(1a)\",\"status\":\"affected\"},{\"version\":\"7.3(5)D1(1)\",\"status\":\"affected\"},{\"version\":\"8.4(2)\",\"status\":\"affected\"},{\"version\":\"7.3(6)N1(1)\",\"status\":\"affected\"},{\"version\":\"6.2(2)\",\"status\":\"affected\"},{\"version\":\"8.4(3)\",\"status\":\"affected\"},{\"version\":\"9.2(3)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I5(2)\",\"status\":\"affected\"},{\"version\":\"8.2(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(7a)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I4(5)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A6(1)\",\"status\":\"affected\"},{\"version\":\"7.3(1)D1(1)\",\"status\":\"affected\"},{\"version\":\"6.2(14a)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I4(6)\",\"status\":\"affected\"},{\"version\":\"7.3(4)N1(1)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I4(3)\",\"status\":\"affected\"},{\"version\":\"9.2(2v)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A6(5b)\",\"status\":\"affected\"},{\"version\":\"7.3(0)D1(1)\",\"status\":\"affected\"},{\"version\":\"6.2(17a)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I4(7)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(1a)\",\"status\":\"affected\"},{\"version\":\"7.1(5)N1(1b)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I4(1)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I4(8)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I4(2)\",\"status\":\"affected\"},{\"version\":\"7.1(4)N1(1c)\",\"status\":\"affected\"},{\"version\":\"7.0(3)IM3(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(5a)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(11)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A6(4a)\",\"status\":\"affected\"},{\"version\":\"6.2(9)\",\"status\":\"affected\"},{\"version\":\"6.2(5)\",\"status\":\"affected\"},{\"version\":\"7.3(4)D1(1)\",\"status\":\"affected\"},{\"version\":\"6.2(20)\",\"status\":\"affected\"},{\"version\":\"9.2(1)\",\"status\":\"affected\"},{\"version\":\"9.2(2t)\",\"status\":\"affected\"},{\"version\":\"9.2(3y)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I4(1t)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(5c)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A6(4)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I7(6z)\",\"status\":\"affected\"},{\"version\":\"9.3(2)\",\"status\":\"affected\"},{\"version\":\"7.3(1)DY(1)\",\"status\":\"affected\"},{\"version\":\"7.0(3)F3(3)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(6)\",\"status\":\"affected\"},{\"version\":\"6.2(29)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I7(3z)\",\"status\":\"affected\"},{\"version\":\"7.0(3)IM7(2)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(11b)\",\"status\":\"affected\"},{\"version\":\"6.2(9a)\",\"status\":\"affected\"},{\"version\":\"7.3(0)N1(1)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I7(5a)\",\"status\":\"affected\"},{\"version\":\"6.2(11d)\",\"status\":\"affected\"},{\"version\":\"8.1(1)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I6(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(10)\",\"status\":\"affected\"},{\"version\":\"7.2(2)D1(2)\",\"status\":\"affected\"},{\"version\":\"7.0(3)IM3(2)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A6(8)\",\"status\":\"affected\"},{\"version\":\"8.2(2)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(1)\",\"status\":\"affected\"},{\"version\":\"7.3(2)N1(1c)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I5(3b)\",\"status\":\"affected\"},{\"version\":\"8.3(2)\",\"status\":\"affected\"},{\"version\":\"7.3(5)N1(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A6(2a)\",\"status\":\"affected\"},{\"version\":\"7.3(2)N1(1b)\",\"status\":\"affected\"},{\"version\":\"6.2(27)\",\"status\":\"affected\"},{\"version\":\"7.3(2)D1(3a)\",\"status\":\"affected\"},{\"version\":\"7.3(1)N1(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(7)\",\"status\":\"affected\"},{\"version\":\"9.2(4)\",\"status\":\"affected\"},{\"version\":\"7.1(4)N1(1a)\",\"status\":\"affected\"},{\"version\":\"7.1(3)N1(4)\",\"status\":\"affected\"},{\"version\":\"7.0(3)IM3(2a)\",\"status\":\"affected\"},{\"version\":\"6.2(8b)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(10)\",\"status\":\"affected\"},{\"version\":\"7.1(3)N1(2)\",\"status\":\"affected\"},{\"version\":\"6.2(13)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(2)\",\"status\":\"affected\"},{\"version\":\"7.0(3)IC4(4)\",\"status\":\"affected\"},{\"version\":\"6.2(1)\",\"status\":\"affected\"},{\"version\":\"7.3(4)N1(1a)\",\"status\":\"affected\"},{\"version\":\"8.1(2)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A6(3)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(5b)\",\"status\":\"affected\"},{\"version\":\"7.0(3)F3(3c)\",\"status\":\"affected\"},{\"version\":\"7.3(3)D1(1)\",\"status\":\"affected\"},{\"version\":\"7.0(3)F3(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(5)\",\"status\":\"affected\"},{\"version\":\"7.0(3)F3(5)\",\"status\":\"affected\"},{\"version\":\"7.1(2)N1(1)\",\"status\":\"affected\"},{\"version\":\"7.1(3)N1(3)\",\"status\":\"affected\"},{\"version\":\"8.2(3)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A6(7)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I7(2)\",\"status\":\"affected\"},{\"version\":\"6.2(5a)\",\"status\":\"affected\"},{\"version\":\"6.2(18)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A6(5)\",\"status\":\"affected\"},{\"version\":\"7.0(3)IM3(2b)\",\"status\":\"affected\"},{\"version\":\"7.1(3)N1(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(4a)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I5(3)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I7(3)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(6)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I6(2)\",\"status\":\"affected\"},{\"version\":\"8.3(1)\",\"status\":\"affected\"},{\"version\":\"6.2(3)\",\"status\":\"affected\"},{\"version\":\"6.2(22)\",\"status\":\"affected\"},{\"version\":\"7.1(1)N1(1)\",\"status\":\"affected\"},{\"version\":\"8.4(1)\",\"status\":\"affected\"},{\"version\":\"8.1(1b)\",\"status\":\"affected\"},{\"version\":\"7.3(0)N1(1b)\",\"status\":\"affected\"},{\"version\":\"7.2(2)D1(4)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(5)\",\"status\":\"affected\"},{\"version\":\"7.3(0)DX(1)\",\"status\":\"affected\"},{\"version\":\"7.1(4)N1(1d)\",\"status\":\"affected\"},{\"version\":\"7.3(2)D1(1)\",\"status\":\"affected\"},{\"version\":\"7.3(2)N1(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(8)\",\"status\":\"affected\"},{\"version\":\"7.1(1)N1(1a)\",\"status\":\"affected\"},{\"version\":\"7.0(3)IM3(3)\",\"status\":\"affected\"},{\"version\":\"9.3(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(2)\",\"status\":\"affected\"},{\"version\":\"6.2(9b)\",\"status\":\"affected\"},{\"version\":\"7.1(3)N1(2a)\",\"status\":\"affected\"},{\"version\":\"7.3(0)N1(1a)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(7)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I7(6)\",\"status\":\"affected\"},{\"version\":\"7.3(2)D1(2)\",\"status\":\"affected\"},{\"version\":\"6.2(25)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(3a)\",\"status\":\"affected\"},{\"version\":\"8.0(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(11a)\",\"status\":\"affected\"},{\"version\":\"6.2(11e)\",\"status\":\"affected\"},{\"version\":\"7.1(3)N1(5)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I4(8z)\",\"status\":\"affected\"},{\"version\":\"6.2(11)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I4(9)\",\"status\":\"affected\"},{\"version\":\"6.2(16)\",\"status\":\"affected\"},{\"version\":\"6.2(19)\",\"status\":\"affected\"},{\"version\":\"8.2(4)\",\"status\":\"affected\"},{\"version\":\"6.2(2a)\",\"status\":\"affected\"},{\"version\":\"7.2(2)D1(3)\",\"status\":\"affected\"},{\"version\":\"7.1(0)N1(1b)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I7(4)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I7(7)\",\"status\":\"affected\"},{\"version\":\"6.2(5b)\",\"status\":\"affected\"},{\"version\":\"7.3(0)DY(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(9)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(1)\",\"status\":\"affected\"},{\"version\":\"7.1(5)N1(1)\",\"status\":\"affected\"},{\"version\":\"7.2(1)D1(1)\",\"status\":\"affected\"},{\"version\":\"6.2(15)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A6(6)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(10a)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I5(1)\",\"status\":\"affected\"},{\"version\":\"9.3(1z)\",\"status\":\"affected\"},{\"version\":\"9.2(2)\",\"status\":\"affected\"},{\"version\":\"6.2(7)\",\"status\":\"affected\"},{\"version\":\"6.2(9c)\",\"status\":\"affected\"},{\"version\":\"7.0(3)F3(4)\",\"status\":\"affected\"},{\"version\":\"7.3(3)N1(1)\",\"status\":\"affected\"},{\"version\":\"6.2(6b)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I4(8b)\",\"status\":\"affected\"},{\"version\":\"8.1(2a)\",\"status\":\"affected\"},{\"version\":\"7.3(2)D1(3)\",\"status\":\"affected\"},{\"version\":\"6.2(8)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(3)\",\"status\":\"affected\"},{\"version\":\"6.2(11b)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I4(6t)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I5(3a)\",\"status\":\"affected\"},{\"version\":\"8.1(1a)\",\"status\":\"affected\"},{\"version\":\"6.2(13a)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(8)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I7(5)\",\"status\":\"affected\"},{\"version\":\"7.0(3)F3(3a)\",\"status\":\"affected\"},{\"version\":\"7.1(0)N1(1a)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(4)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A6(3a)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A6(5a)\",\"status\":\"affected\"},{\"version\":\"7.0(3)F2(1)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I4(8a)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(9)\",\"status\":\"affected\"},{\"version\":\"7.0(3)F3(2)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(2a)\",\"status\":\"affected\"},{\"version\":\"6.2(12)\",\"status\":\"affected\"},{\"version\":\"6.2(17)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I4(4)\",\"status\":\"affected\"},{\"version\":\"6.2(23)\",\"status\":\"affected\"},{\"version\":\"6.2(13b)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(3)\",\"status\":\"affected\"},{\"version\":\"6.2(10)\",\"status\":\"affected\"},{\"version\":\"6.2(6a)\",\"status\":\"affected\"},{\"version\":\"6.2(6)\",\"status\":\"affected\"},{\"version\":\"7.1(2)N1(1a)\",\"status\":\"affected\"},{\"version\":\"6.2(14)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I7(1)\",\"status\":\"affected\"},{\"version\":\"6.2(14b)\",\"status\":\"affected\"},{\"version\":\"6.2(21)\",\"status\":\"affected\"},{\"version\":\"7.2(2)D1(1)\",\"status\":\"affected\"},{\"version\":\"7.0(3)F2(2)\",\"status\":\"affected\"},{\"version\":\"7.0(3)IA7(2)\",\"status\":\"affected\"},{\"version\":\"7.0(3)IA7(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(7b)\",\"status\":\"affected\"},{\"version\":\"6.2(8a)\",\"status\":\"affected\"},{\"version\":\"6.2(11c)\",\"status\":\"affected\"},{\"version\":\"7.0(3)F1(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A6(1a)\",\"status\":\"affected\"},{\"version\":\"7.1(0)N1(1)\",\"status\":\"affected\"},{\"version\":\"7.2(0)D1(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A6(2)\",\"status\":\"affected\"},{\"version\":\"7.1(4)N1(1)\",\"status\":\"affected\"},{\"version\":\"6.0(2)A8(4a)\",\"status\":\"affected\"},{\"version\":\"6.2(20a)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(4)\",\"status\":\"affected\"},{\"version\":\"8.4(1a)\",\"status\":\"affected\"},{\"version\":\"9.3(3)\",\"status\":\"affected\"},{\"version\":\"7.3(2)D1(1d)\",\"status\":\"affected\"},{\"version\":\"7.3(7)N1(1)\",\"status\":\"affected\"},{\"version\":\"6.2(24)\",\"status\":\"affected\"},{\"version\":\"6.2(31)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I7(8)\",\"status\":\"affected\"},{\"version\":\"6.0(2)U6(10a)\",\"status\":\"affected\"},{\"version\":\"7.3(7)N1(1a)\",\"status\":\"affected\"},{\"version\":\"9.3(4)\",\"status\":\"affected\"},{\"version\":\"7.3(6)D1(1)\",\"status\":\"affected\"},{\"version\":\"6.2(26)\",\"status\":\"affected\"},{\"version\":\"8.2(6)\",\"status\":\"affected\"},{\"version\":\"6.2(33)\",\"status\":\"affected\"},{\"version\":\"9.3(5)\",\"status\":\"affected\"},{\"version\":\"8.4(2a)\",\"status\":\"affected\"},{\"version\":\"8.4(2b)\",\"status\":\"affected\"},{\"version\":\"7.3(8)N1(1)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I7(9)\",\"status\":\"affected\"},{\"version\":\"7.3(7)N1(1b)\",\"status\":\"affected\"},{\"version\":\"6.2(24a)\",\"status\":\"affected\"},{\"version\":\"8.5(1)\",\"status\":\"affected\"},{\"version\":\"9.3(6)\",\"status\":\"affected\"},{\"version\":\"10.1(2)\",\"status\":\"affected\"},{\"version\":\"10.1(1)\",\"status\":\"affected\"},{\"version\":\"8.4(4)\",\"status\":\"affected\"},{\"version\":\"7.3(7)D1(1)\",\"status\":\"affected\"},{\"version\":\"8.4(2c)\",\"status\":\"affected\"},{\"version\":\"9.3(5w)\",\"status\":\"affected\"},{\"version\":\"8.2(7)\",\"status\":\"affected\"},{\"version\":\"7.3(9)N1(1)\",\"status\":\"affected\"},{\"version\":\"9.3(7)\",\"status\":\"affected\"},{\"version\":\"9.3(7k)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I7(9w)\",\"status\":\"affected\"},{\"version\":\"10.2(1)\",\"status\":\"affected\"},{\"version\":\"7.3(8)N1(1a)\",\"status\":\"affected\"},{\"version\":\"7.3(8)D1(1)\",\"status\":\"affected\"},{\"version\":\"9.3(7a)\",\"status\":\"affected\"},{\"version\":\"8.2(7a)\",\"status\":\"affected\"},{\"version\":\"9.3(8)\",\"status\":\"affected\"},{\"version\":\"8.4(4a)\",\"status\":\"affected\"},{\"version\":\"8.4(2d)\",\"status\":\"affected\"},{\"version\":\"7.3(10)N1(1)\",\"status\":\"affected\"},{\"version\":\"8.4(5)\",\"status\":\"affected\"},{\"version\":\"7.0(3)I7(10)\",\"status\":\"affected\"},{\"version\":\"7.3(8)N1(1b)\",\"status\":\"affected\"},{\"version\":\"8.2(8)\",\"status\":\"affected\"},{\"version\":\"10.2(1q)\",\"status\":\"affected\"},{\"version\":\"10.2(2)\",\"status\":\"affected\"},{\"version\":\"9.3(9)\",\"status\":\"affected\"},{\"version\":\"7.3(9)D1(1)\",\"status\":\"affected\"},{\"version\":\"7.3(11)N1(1)\",\"status\":\"affected\"},{\"version\":\"10.2(3)\",\"status\":\"affected\"},{\"version\":\"8.4(6)\",\"status\":\"affected\"},{\"version\":\"8.4(2e)\",\"status\":\"affected\"},{\"version\":\"9.3(10)\",\"status\":\"affected\"},{\"version\":\"7.3(11)N1(1a)\",\"status\":\"affected\"},{\"version\":\"10.2(2a)\",\"status\":\"affected\"},{\"version\":\"7.3(12)N1(1)\",\"status\":\"affected\"},{\"version\":\"9.2(1a)\",\"status\":\"affected\"},{\"version\":\"8.2(9)\",\"status\":\"affected\"},{\"version\":\"10.3(1)\",\"status\":\"affected\"},{\"version\":\"10.2(4)\",\"status\":\"affected\"},{\"version\":\"7.3(13)N1(1)\",\"status\":\"affected\"},{\"version\":\"8.4(7)\",\"status\":\"affected\"},{\"version\":\"10.3(2)\",\"status\":\"affected\"},{\"version\":\"8.4(6a)\",\"status\":\"affected\"},{\"version\":\"9.3(11)\",\"status\":\"affected\"},{\"version\":\"10.3(3)\",\"status\":\"affected\"},{\"version\":\"10.2(5)\",\"status\":\"affected\"},{\"version\":\"9.4(1)\",\"status\":\"affected\"},{\"version\":\"9.3(2a)\",\"status\":\"affected\"},{\"version\":\"8.4(2f)\",\"status\":\"affected\"},{\"version\":\"8.2(10)\",\"status\":\"affected\"},{\"version\":\"9.3(12)\",\"status\":\"affected\"},{\"version\":\"10.4(1)\",\"status\":\"affected\"},{\"version\":\"8.4(8)\",\"status\":\"affected\"},{\"version\":\"10.3(99w)\",\"status\":\"affected\"},{\"version\":\"7.3(14)N1(1)\",\"status\":\"affected\"},{\"version\":\"10.2(6)\",\"status\":\"affected\"},{\"version\":\"10.3(3w)\",\"status\":\"affected\"},{\"version\":\"10.3(99x)\",\"status\":\"affected\"},{\"version\":\"10.3(3o)\",\"status\":\"affected\"},{\"version\":\"8.4(9)\",\"status\":\"affected\"},{\"version\":\"10.3(4)\",\"status\":\"affected\"},{\"version\":\"10.3(3p)\",\"status\":\"affected\"},{\"version\":\"10.3(4a)\",\"status\":\"affected\"},{\"version\":\"9.4(1a)\",\"status\":\"affected\"},{\"version\":\"10.4(2)\",\"status\":\"affected\"},{\"version\":\"10.3(3q)\",\"status\":\"affected\"},{\"version\":\"9.3(13)\",\"status\":\"affected\"},{\"version\":\"8.2(11)\",\"status\":\"affected\"},{\"version\":\"9.4(2)\",\"status\":\"affected\"},{\"version\":\"10.3(5)\",\"status\":\"affected\"},{\"version\":\"10.2(7)\",\"status\":\"affected\"},{\"version\":\"10.3(3x)\",\"status\":\"affected\"},{\"version\":\"10.3(4g)\",\"status\":\"affected\"},{\"version\":\"10.2(8)\",\"status\":\"affected\"},{\"version\":\"10.3(3r)\",\"status\":\"affected\"}],\"defaultStatus\":\"unknown\"}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-20399", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-20399\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-20399（Cisco NX-OS Software）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者は管理者権限の認証情報（Administrator クレデンシャル）を保持している必要があります。\n・攻撃には、影響を受ける特定の設定 CLI コマンドに細工した引数を入力できることが前提です。\n・Nexus 3000 シリーズ、Nexus 7000 シリーズ（Cisco NX-OS 8.1(1) 以降）、Nexus 9000 シリーズのスタンドアロン NX-OS モードでは、既に管理者ユーザーが bash-shell 機能を通じて OS にアクセスできるため、本脆弱性は追加の特権を付与しません。\n・公式の対象表：Cisco / Cisco NX-OS Software。影響ありとして記載：8.2(5)。影響ありとして記載：7.3(6)N1(1a)。影響ありとして記載：7.3(5)D1(1)。影響ありとして記載：8.4(2)。影響ありとして記載：7.3(6)N1(1)。影響ありとして記載：6.2(2)。影響ありとして記載：8.4(3)。影響ありとして記載：9.2(3)。影響ありとして記載：7.0(3)I5(2)。影響ありとして記載：8.2(1)。影響ありとして記載：6.0(2)A8(7a)。影響ありとして記載：7.0(3)I4(5)。影響ありとして記載：6.0(2)A6(1)。影響ありとして記載：7.3(1)D1(1)。影響ありとして記載：6.2(14a)。影響ありとして記載：7.0(3)I4(6)。影響ありとして記載：7.3(4)N1(1)。影響ありとして記載：7.0(3)I4(3)。影響ありとして記載：9.2(2v)。影響ありとして記載：6.0(2)A6(5b)。影響ありとして記載：7.3(0)D1(1)。影響ありとして記載：6.2(17a)。影響ありとして記載：7.0(3)I4(7)。影響ありとして記載：6.0(2)U6(1a)。影響ありとして記載：7.1(5)N1(1b)。影響ありとして記載：7.0(3)I4(1)。影響ありとして記載：7.0(3)I4(8)。影響ありとして記載：7.0(3)I4(2)。影響ありとして記載：7.1(4)N1(1c)。影響ありとして記載：7.0(3)IM3(1)。影響ありとして記載：6.0(2)U6(5a)。影響ありとして記載：6.0(2)A8(11)。影響ありとして記載：6.0(2)A6(4a)。影響ありとして記載：6.2(9)。影響ありとして記載：6.2(5)。影響ありとして記載：7.3(4)D1(1)。影響ありとして記載：6.2(20)。影響ありとして記載：9.2(1)。影響ありとして記載：9.2(2t)。影響ありとして記載：9.2(3y)。影響ありとして記載：7.0(3)I4(1t)。影響ありとして記載：6.0(2)U6(5c)。影響ありとして記載：6.0(2)A6(4)。影響ありとして記載：7.0(3)I7(6z)。影響ありとして記載：9.3(2)。影響ありとして記載：7.3(1)DY(1)。影響ありとして記載：7.0(3)F3(3)。影響ありとして記載：6.0(2)U6(6)。影響ありとして記載：6.2(29)。影響ありとして記載：7.0(3)I7(3z)。影響ありとして記載：7.0(3)IM7(2)。影響ありとして記載：6.0(2)A8(11b)。影響ありとして記載：6.2(9a)。影響ありとして記載：7.3(0)N1(1)。影響ありとして記載：7.0(3)I7(5a)。影響ありとして記載：6.2(11d)。影響ありとして記載：8.1(1)。影響ありとして記載：7.0(3)I6(1)。影響ありとして記載：6.0(2)U6(10)。影響ありとして記載：7.2(2)D1(2)。影響ありとして記載：7.0(3)IM3(2)。影響ありとして記載：6.0(2)A6(8)。影響ありとして記載：8.2(2)。影響ありとして記載：6.0(2)U6(1)。影響ありとして記載：7.3(2)N1(1c)。影響ありとして記載：7.0(3)I5(3b)。影響ありとして記載：8.3(2)。影響ありとして記載：7.3(5)N1(1)。影響ありとして記載：6.0(2)A6(2a)。影響ありとして記載：7.3(2)N1(1b)。影響ありとして記載：6.2(27)。影響ありとして記載：7.3(2)D1(3a)。影響ありとして記載：7.3(1)N1(1)。影響ありとして記載：6.0(2)U6(7)。影響ありとして記載：9.2(4)。影響ありとして記載：7.1(4)N1(1a)。影響ありとして記載：7.1(3)N1(4)。影響ありとして記載：7.0(3)IM3(2a)。影響ありとして記載：6.2(8b)。影響ありとして記載：6.0(2)A8(10)。影響ありとして記載：7.1(3)N1(2)。影響ありとして記載：6.2(13)。影響ありとして記載：6.0(2)A8(2)。影響ありとして記載：7.0(3)IC4(4)。影響ありとして記載：6.2(1)。影響ありとして記載：7.3(4)N1(1a)。影響ありとして記載：8.1(2)。影響ありとして記載：6.0(2)A6(3)。影響ありとして記載：6.0(2)U6(5b)。影響ありとして記載：7.0(3)F3(3c)。影響ありとして記載：7.3(3)D1(1)。影響ありとして記載：7.0(3)F3(1)。影響ありとして記載：6.0(2)U6(5)。影響ありとして記載：7.0(3)F3(5)。影響ありとして記載：7.1(2)N1(1)。影響ありとして記載：7.1(3)N1(3)。影響ありとして記載：8.2(3)。影響ありとして記載：6.0(2)A6(7)。影響ありとして記載：7.0(3)I7(2)。影響ありとして記載：6.2(5a)。影響ありとして記載：6.2(18)。影響ありとして記載：6.0(2)A6(5)。影響ありとして記載：7.0(3)IM3(2b)。影響ありとして記載：7.1(3)N1(1)。影響ありとして記載：6.0(2)U6(4a)。影響ありとして記載：7.0(3)I5(3)。影響ありとして記載：7.0(3)I7(3)。影響ありとして記載：6.0(2)A8(6)。影響ありとして記載：7.0(3)I6(2)。影響ありとして記載：8.3(1)。影響ありとして記載：6.2(3)。影響ありとして記載：6.2(22)。影響ありとして記載：7.1(1)N1(1)。影響ありとして記載：8.4(1)。影響ありとして記載：8.1(1b)。影響ありとして記載：7.3(0)N1(1b)。影響ありとして記載：7.2(2)D1(4)。影響ありとして記載：6.0(2)A8(5)。影響ありとして記載：7.3(0)DX(1)。影響ありとして記載：7.1(4)N1(1d)。影響ありとして記載：7.3(2)D1(1)。影響ありとして記載：7.3(2)N1(1)。影響ありとして記載：6.0(2)U6(8)。影響ありとして記載：7.1(1)N1(1a)。影響ありとして記載：7.0(3)IM3(3)。影響ありとして記載：9.3(1)。影響ありとして記載：6.0(2)U6(2)。影響ありとして記載：6.2(9b)。影響ありとして記載：7.1(3)N1(2a)。影響ありとして記載：7.3(0)N1(1a)。影響ありとして記載：6.0(2)A8(7)。影響ありとして記載：7.0(3)I7(6)。影響ありとして記載：7.3(2)D1(2)。影響ありとして記載：6.2(25)。影響ありとして記載：6.0(2)U6(3a)。影響ありとして記載：8.0(1)。影響ありとして記載：6.0(2)A8(11a)。影響ありとして記載：6.2(11e)。影響ありとして記載：7.1(3)N1(5)。影響ありとして記載：7.0(3)I4(8z)。影響ありとして記載：6.2(11)。影響ありとして記載：7.0(3)I4(9)。影響ありとして記載：6.2(16)。影響ありとして記載：6.2(19)。影響ありとして記載：8.2(4)。影響ありとして記載：6.2(2a)。影響ありとして記載：7.2(2)D1(3)。影響ありとして記載：7.1(0)N1(1b)。影響ありとして記載：7.0(3)I7(4)。影響ありとして記載：7.0(3)I7(7)。影響ありとして記載：6.2(5b)。影響ありとして記載：7.3(0)DY(1)。影響ありとして記載：6.0(2)A8(9)。影響ありとして記載：6.0(2)A8(1)。影響ありとして記載：7.1(5)N1(1)。影響ありとして記載：7.2(1)D1(1)。影響ありとして記載：6.2(15)。影響ありとして記載：6.0(2)A6(6)。影響ありとして記載：6.0(2)A8(10a)。影響ありとして記載：7.0(3)I5(1)。影響ありとして記載：9.3(1z)。影響ありとして記載：9.2(2)。影響ありとして記載：6.2(7)。影響ありとして記載：6.2(9c)。影響ありとして記載：7.0(3)F3(4)。影響ありとして記載：7.3(3)N1(1)。影響ありとして記載：6.2(6b)。影響ありとして記載：7.0(3)I4(8b)。影響ありとして記載：8.1(2a)。影響ありとして記載：7.3(2)D1(3)。影響ありとして記載：6.2(8)。影響ありとして記載：6.0(2)A8(3)。影響ありとして記載：6.2(11b)。影響ありとして記載：7.0(3)I4(6t)。影響ありとして記載：7.0(3)I5(3a)。影響ありとして記載：8.1(1a)。影響ありとして記載：6.2(13a)。影響ありとして記載：6.0(2)A8(8)。影響ありとして記載：7.0(3)I7(5)。影響ありとして記載：7.0(3)F3(3a)。影響ありとして記載：7.1(0)N1(1a)。影響ありとして記載：6.0(2)A8(4)。影響ありとして記載：6.0(2)A6(3a)。影響ありとして記載：6.0(2)A6(5a)。影響ありとして記載：7.0(3)F2(1)。影響ありとして記載：7.0(3)I4(8a)。影響ありとして記載：6.0(2)U6(9)。影響ありとして記載：7.0(3)F3(2)。影響ありとして記載：6.0(2)U6(2a)。影響ありとして記載：6.2(12)。影響ありとして記載：6.2(17)。影響ありとして記載：7.0(3)I4(4)。影響ありとして記載：6.2(23)。影響ありとして記載：6.2(13b)。影響ありとして記載：6.0(2)U6(3)。影響ありとして記載：6.2(10)。影響ありとして記載：6.2(6a)。影響ありとして記載：6.2(6)。影響ありとして記載：7.1(2)N1(1a)。影響ありとして記載：6.2(14)。影響ありとして記載：7.0(3)I7(1)。影響ありとして記載：6.2(14b)。影響ありとして記載：6.2(21)。影響ありとして記載：7.2(2)D1(1)。影響ありとして記載：7.0(3)F2(2)。影響ありとして記載：7.0(3)IA7(2)。影響ありとして記載：7.0(3)IA7(1)。影響ありとして記載：6.0(2)A8(7b)。影響ありとして記載：6.2(8a)。影響ありとして記載：6.2(11c)。影響ありとして記載：7.0(3)F1(1)。影響ありとして記載：6.0(2)A6(1a)。影響ありとして記載：7.1(0)N1(1)。影響ありとして記載：7.2(0)D1(1)。影響ありとして記載：6.0(2)A6(2)。影響ありとして記載：7.1(4)N1(1)。影響ありとして記載：6.0(2)A8(4a)。影響ありとして記載：6.2(20a)。影響ありとして記載：6.0(2)U6(4)。影響ありとして記載：8.4(1a)。影響ありとして記載：9.3(3)。影響ありとして記載：7.3(2)D1(1d)。影響ありとして記載：7.3(7)N1(1)。影響ありとして記載：6.2(24)。影響ありとして記載：6.2(31)。影響ありとして記載：7.0(3)I7(8)。影響ありとして記載：6.0(2)U6(10a)。影響ありとして記載：7.3(7)N1(1a)。影響ありとして記載：9.3(4)。影響ありとして記載：7.3(6)D1(1)。影響ありとして記載：6.2(26)。影響ありとして記載：8.2(6)。影響ありとして記載：6.2(33)。影響ありとして記載：9.3(5)。影響ありとして記載：8.4(2a)。影響ありとして記載：8.4(2b)。影響ありとして記載：7.3(8)N1(1)。影響ありとして記載：7.0(3)I7(9)。影響ありとして記載：7.3(7)N1(1b)。影響ありとして記載：6.2(24a)。影響ありとして記載：8.5(1)。影響ありとして記載：9.3(6)。影響ありとして記載：10.1(2)。影響ありとして記載：10.1(1)。影響ありとして記載：8.4(4)。影響ありとして記載：7.3(7)D1(1)。影響ありとして記載：8.4(2c)。影響ありとして記載：9.3(5w)。影響ありとして記載：8.2(7)。影響ありとして記載：7.3(9)N1(1)。影響ありとして記載：9.3(7)。影響ありとして記載：9.3(7k)。影響ありとして記載：7.0(3)I7(9w)。影響ありとして記載：10.2(1)。影響ありとして記載：7.3(8)N1(1a)。影響ありとして記載：7.3(8)D1(1)。影響ありとして記載：9.3(7a)。影響ありとして記載：8.2(7a)。影響ありとして記載：9.3(8)。影響ありとして記載：8.4(4a)。影響ありとして記載：8.4(2d)。影響ありとして記載：7.3(10)N1(1)。影響ありとして記載：8.4(5)。影響ありとして記載：7.0(3)I7(10)。影響ありとして記載：7.3(8)N1(1b)。影響ありとして記載：8.2(8)。影響ありとして記載：10.2(1q)。影響ありとして記載：10.2(2)。影響ありとして記載：9.3(9)。影響ありとして記載：7.3(9)D1(1)。影響ありとして記載：7.3(11)N1(1)。影響ありとして記載：10.2(3)。影響ありとして記載：8.4(6)。影響ありとして記載：8.4(2e)。影響ありとして記載：9.3(10)。影響ありとして記載：7.3(11)N1(1a)。影響ありとして記載：10.2(2a)。影響ありとして記載：7.3(12)N1(1)。影響ありとして記載：9.2(1a)。影響ありとして記載：8.2(9)。影響ありとして記載：10.3(1)。影響ありとして記載：10.2(4)。影響ありとして記載：7.3(13)N1(1)。影響ありとして記載：8.4(7)。影響ありとして記載：10.3(2)。影響ありとして記載：8.4(6a)。影響ありとして記載：9.3(11)。影響ありとして記載：10.3(3)。影響ありとして記載：10.2(5)。影響ありとして記載：9.4(1)。影響ありとして記載：9.3(2a)。影響ありとして記載：8.4(2f)。影響ありとして記載：8.2(10)。影響ありとして記載：9.3(12)。影響ありとして記載：10.4(1)。影響ありとして記載：8.4(8)。影響ありとして記載：10.3(99w)。影響ありとして記載：7.3(14)N1(1)。影響ありとして記載：10.2(6)。影響ありとして記載：10.3(3w)。個別に記されていない版の影響は、原資料でも未確定です。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-20399", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:15:52.594Z", "lastSuccess": "2026-10-24T05:15:52.594Z", "sourceCheckedAt": "2026-10-24T05:15:52.594Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2020-13965", "aliases": [], "title": "n/a：ブラウザー上での不正な処理", "summary": "Roundcube Webmail のバージョンが 1.3.12 未満、または 1.4 系で 1.4.5 未満の場合、プレビューで text/xml を許可しているため、悪意ある XML 添付ファイルにより XSS が発生します。", "risk": "攻撃者がデータを改ざんできる可能性があります。", "product": "Roundcube Webmail", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "mitre", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/13xxx/CVE-2020-13965.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-13965", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2020-13965", "label": "CVE公式レコード" }, { "url": "https://github.com/roundcube/roundcubemail/releases/tag/1.4.5", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/roundcube/roundcubemail/releases/tag/1.3.12", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/roundcube/roundcubemail/commit/884eb611627ef2bd5a2e20e02009ebb1eceecdc3", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/roundcube/roundcubemail/compare/1.4.4...1.4.5", "label": "CVE掲載の参考情報" }, { "url": "https://roundcube.net/news/2020/06/02/security-updates-1.4.5-and-1.3.12", "label": "CISAが示す関連情報" }, { "url": "https://www.debian.org/security/2020/dsa-4700", "label": "DSA-4700" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DLESQ4LPJGMSWHQ4TBRTVQRDG7IXAZCW/", "label": "FEDORA-2020-2a1a6a8432" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ODPJXBHZ32QSP4MYT2OBCALYXSUJ47SK/", "label": "FEDORA-2020-aeffd92b77" }, { "url": "https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-13965-Cross%20Site-Scripting%20via%20Malicious%20XML%20Attachment-Roundcube", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-13965", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2020-06-09T02:45:24.000Z", "modifiedAt": "2025-10-21T23:35:42.715Z", "fetchedAt": "2026-10-24T05:15:52.594Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML attachment because text/xml is among the allowed types for a preview.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2020-13965", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/13xxx/CVE-2020-13965.json", "fetchedAt": "2026-10-24T05:15:52.594Z", "publishedAt": "2020-06-09T02:45:24.000Z", "modifiedAt": "2025-10-21T23:35:42.715Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML attachment because text/xml is among the allowed types for a preview.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to manipulate data via a malicious XML attachment.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-13965", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "baseScore": 6.3, "baseSeverity": "MEDIUM", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://github.com/roundcube/roundcubemail/releases/tag/1.4.5", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://github.com/roundcube/roundcubemail/releases/tag/1.3.12", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://github.com/roundcube/roundcubemail/commit/884eb611627ef2bd5a2e20e02009ebb1eceecdc3", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" }, { "url": "https://github.com/roundcube/roundcubemail/compare/1.4.4...1.4.5", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/3" }, { "url": "https://roundcube.net/news/2020/06/02/security-updates-1.4.5-and-1.3.12", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/4" }, { "url": "https://www.debian.org/security/2020/dsa-4700", "label": "DSA-4700", "tags": [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/5" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DLESQ4LPJGMSWHQ4TBRTVQRDG7IXAZCW/", "label": "FEDORA-2020-2a1a6a8432", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/6" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ODPJXBHZ32QSP4MYT2OBCALYXSUJ47SK/", "label": "FEDORA-2020-aeffd92b77", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/7" }, { "url": "https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-13965-Cross%20Site-Scripting%20via%20Malicious%20XML%20Attachment-Roundcube", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/8" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-13965", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/13xxx/CVE-2020-13965.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/13xxx/CVE-2020-13965.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML attachment because text/xml is among the allowed types for a preview.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/13xxx/CVE-2020-13965.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"n/a\",\"lang\":\"en\",\"type\":\"text\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/13xxx/CVE-2020-13965.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":6.3,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"MEDIUM\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L\",\"integrityImpact\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"LOW\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"LOW\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2020-13965:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-13965", "sourcePath": "retained:/originalText", "text": "Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to manipulate data via a malicious XML attachment.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2020-13965:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-13965", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-13965", "modifiedAt": "2024-06-26T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:35:42.715Z", "fetchedAt": "2026-10-24T05:15:52.594Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-06-26T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "n/aにブラウザー上での不正な処理に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "利用者のブラウザー上で不正なスクリプトが動く可能性があります。成立条件は原文を確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:15:52.594Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "2fb7ce0787bfc09f06cf70c94f44e7a550fb688931cb1f28c429249d32485871", "sourceModifiedAt": "2025-10-21T23:35:42.715Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Roundcube Webmail のバージョンが 1.3.12 未満、または 1.4 系で 1.4.5 未満の場合、プレビューで text/xml を許可しているため、悪意ある XML 添付ファイルにより XSS が発生します。", "risk": "攻撃者がデータを改ざんできる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "Roundcube Webmail のバージョンが 1.3.12 未満であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/13xxx/CVE-2020-13965.json" ], "evidenceIds": [ "E1" ] }, { "text": "Roundcube Webmail の 1.4 系のバージョンが 1.4.5 未満であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/13xxx/CVE-2020-13965.json" ], "evidenceIds": [ "E1" ] }, { "text": "プレビュー機能で text/xml が許可されていること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/13xxx/CVE-2020-13965.json" ], "evidenceIds": [ "E1" ] }, { "text": "リモートの攻撃者が悪意ある XML 添付ファイルを送信できること。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-13965" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/13xxx/CVE-2020-13965.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-13965" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/13xxx/CVE-2020-13965.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Roundcube Webmail」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2020-13965", "https://github.com/roundcube/roundcubemail/releases/tag/1.4.5", "https://github.com/roundcube/roundcubemail/releases/tag/1.3.12", "https://github.com/roundcube/roundcubemail/commit/884eb611627ef2bd5a2e20e02009ebb1eceecdc3", "https://github.com/roundcube/roundcubemail/compare/1.4.4...1.4.5", "https://roundcube.net/news/2020/06/02/security-updates-1.4.5-and-1.3.12", "https://www.debian.org/security/2020/dsa-4700", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DLESQ4LPJGMSWHQ4TBRTVQRDG7IXAZCW/", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ODPJXBHZ32QSP4MYT2OBCALYXSUJ47SK/", "https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-13965-Cross%20Site-Scripting%20via%20Malicious%20XML%20Attachment-Roundcube", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-13965", "https://nvd.nist.gov/vuln/detail/CVE-2020-13965" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/13xxx/CVE-2020-13965.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "ベンダーの指示に従って緩和策を適用するか、緩和策が入手できない場合は製品の使用を中止する。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-13965" ], "evidenceIds": [ "E4" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/13xxx/CVE-2020-13965.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2020-13965", "https://github.com/roundcube/roundcubemail/releases/tag/1.4.5", "https://github.com/roundcube/roundcubemail/releases/tag/1.3.12", "https://github.com/roundcube/roundcubemail/commit/884eb611627ef2bd5a2e20e02009ebb1eceecdc3", "https://github.com/roundcube/roundcubemail/compare/1.4.4...1.4.5", "https://roundcube.net/news/2020/06/02/security-updates-1.4.5-and-1.3.12", "https://www.debian.org/security/2020/dsa-4700", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DLESQ4LPJGMSWHQ4TBRTVQRDG7IXAZCW/", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ODPJXBHZ32QSP4MYT2OBCALYXSUJ47SK/", "https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-13965-Cross%20Site-Scripting%20via%20Malicious%20XML%20Attachment-Roundcube", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-13965", "https://nvd.nist.gov/vuln/detail/CVE-2020-13965" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/13xxx/CVE-2020-13965.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-13965", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2020-13965", "label": "CVE公式レコード" }, { "url": "https://github.com/roundcube/roundcubemail/releases/tag/1.4.5", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/roundcube/roundcubemail/releases/tag/1.3.12", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/roundcube/roundcubemail/commit/884eb611627ef2bd5a2e20e02009ebb1eceecdc3", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/roundcube/roundcubemail/compare/1.4.4...1.4.5", "label": "CVE掲載の参考情報" }, { "url": "https://roundcube.net/news/2020/06/02/security-updates-1.4.5-and-1.3.12", "label": "CISAが示す関連情報" }, { "url": "https://www.debian.org/security/2020/dsa-4700", "label": "DSA-4700" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DLESQ4LPJGMSWHQ4TBRTVQRDG7IXAZCW/", "label": "FEDORA-2020-2a1a6a8432" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ODPJXBHZ32QSP4MYT2OBCALYXSUJ47SK/", "label": "FEDORA-2020-aeffd92b77" }, { "url": "https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-13965-Cross%20Site-Scripting%20via%20Malicious%20XML%20Attachment-Roundcube", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-13965", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/13xxx/CVE-2020-13965.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via a malicious XML attachment because text/xml is among the allowed types for a preview.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-13965", "sourceField": "retained:/originalText", "excerpt": "Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to manipulate data via a malicious XML attachment.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/13xxx/CVE-2020-13965.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-13965", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-13965", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2020-13965\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2020-13965（Roundcube Webmail）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Roundcube Webmail のバージョンが 1.3.12 未満であること。\n・Roundcube Webmail の 1.4 系のバージョンが 1.4.5 未満であること。\n・プレビュー機能で text/xml が許可されていること。\n・リモートの攻撃者が悪意ある XML 添付ファイルを送信できること。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2020-13965", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:15:52.594Z", "lastSuccess": "2026-10-24T05:15:52.594Z", "sourceCheckedAt": "2026-10-24T05:15:52.594Z", "errorCode": null }, "glossary": [ { "term": "XSS", "meaning": "ページに紛れ込ませた不正な処理が、ページを表示した人のブラウザーで動く問題です。誰が仕込めるか、どの画面を表示すると動くかが判断のポイントです。", "sourceUrl": "https://cwe.mitre.org/data/definitions/79.html", "kind": "general_definition" } ] } }, { "id": "CVE-2022-24816", "aliases": [], "title": "jai-ext：コード実行", "summary": "JAI-EXTはJava Advanced Imaging APIを拡張するオープンソースプロジェクトです。ネットワーク要求でJiffleスクリプトを提供できるプログラムは、JaninoでJavaコードにコンパイルされ実行されるため、リモートコード実行が可能になります。特に下流のGeoServerプロジェクトに影響します。バージョン1.2.22には、スクリプトへの悪意あるコード注入を無効化するパッチが含まれます。アップグレードできない場合は、janino‑x.y.z.jar をクラスパスから除去することで、最終アプリケーションからJiffleスクリプトのコンパイル機能を無効化できます。", "risk": "攻撃者はリモートから任意のコードを実行させられる可能性があります。", "product": "jai-ext", "category": "other", "component": "package", "severity": "critical", "cvss": 10, "cvssVersion": "3.1", "cvssSource": "GitHub_M", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "affected": [ { "product": "jai-ext", "range": "< 1.1.22" } ], "fixed": [], "steps": [ "公式の対策欄では、次の対応は公開予定の版について示されています。入手できることを前提にせず、現在の提供状況と適用時期を管理担当者・提供元に確認してください。公開された場合の対応：バージョン1.2.22にアップグレードするか、janino‑x.y.z.jar をクラスパスから除去してコード注入を防止する。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/24xxx/CVE-2022-24816.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-24816", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2022-24816", "label": "CVE公式レコード" }, { "url": "https://github.com/geosolutions-it/jai-ext/security/advisories/GHSA-v92f-jx6p-73rx", "label": "CISAが示す関連情報" }, { "url": "https://github.com/geosolutions-it/jai-ext/commit/cb1d6565d38954676b0a366da4f965fef38da1cb", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/geosolutions-it/jai-ext/releases/tag/1.1.22", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24816", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2022-04-13T20:45:17.000Z", "modifiedAt": "2025-10-21T23:15:42.188Z", "fetchedAt": "2026-10-24T05:16:01.848Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "JAI-EXT is an open-source project which aims to extend the Java Advanced Imaging (JAI) API. Programs allowing Jiffle script to be provided via network request can lead to a Remote Code Execution as the Jiffle script is compiled into Java code via Janino, and executed. In particular, this affects the downstream GeoServer project. Version 1.2.22 will contain a patch that disables the ability to inject malicious code into the resulting script. Users unable to upgrade may negate the ability to compile Jiffle scripts from the final application, by removing janino-x.y.z.jar from the classpath.", "sourceTitle": "Improper Control of Generation of Code in jai-ext", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "jai-ext", "vendor": "geosolutions-it", "versions": [ { "status": "affected", "version": "< 1.1.22" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2022-24816", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/24xxx/CVE-2022-24816.json", "fetchedAt": "2026-10-24T05:16:01.848Z", "publishedAt": "2022-04-13T20:45:17.000Z", "modifiedAt": "2025-10-21T23:15:42.188Z", "state": "published", "provider": "GitHub_M", "title": "Improper Control of Generation of Code in jai-ext", "descriptions": [ { "lang": "en", "value": "JAI-EXT is an open-source project which aims to extend the Java Advanced Imaging (JAI) API. Programs allowing Jiffle script to be provided via network request can lead to a Remote Code Execution as the Jiffle script is compiled into Java code via Janino, and executed. In particular, this affects the downstream GeoServer project. Version 1.2.22 will contain a patch that disables the ability to inject malicious code into the resulting script. Users unable to upgrade may negate the ability to compile Jiffle scripts from the final application, by removing janino-x.y.z.jar from the classpath.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "OSGeo GeoServer JAI-EXT contains a code injection vulnerability that, when programs use jt-jiffle and allow Jiffle script to be provided via network request, could allow remote code execution.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-24816", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "geosolutions-it", "product": "jai-ext", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "< 1.1.22", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-94", "lang": "en", "description": "CWE-94: Improper Control of Generation of Code ('Code Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "baseScore": 10, "baseSeverity": "CRITICAL", "provider": "GitHub_M", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://github.com/geosolutions-it/jai-ext/security/advisories/GHSA-v92f-jx6p-73rx", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://github.com/geosolutions-it/jai-ext/commit/cb1d6565d38954676b0a366da4f965fef38da1cb", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-24816", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/24xxx/CVE-2022-24816.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"jai-ext\",\"vendor\":\"geosolutions-it\",\"versions\":[{\"status\":\"affected\",\"version\":\"< 1.1.22\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/24xxx/CVE-2022-24816.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "JAI-EXT is an open-source project which aims to extend the Java Advanced Imaging (JAI) API. Programs allowing Jiffle script to be provided via network request can lead to a Remote Code Execution as the Jiffle script is compiled into Java code via Janino, and executed. In particular, this affects the downstream GeoServer project. Version 1.2.22 will contain a patch that disables the ability to inject malicious code into the resulting script. Users unable to upgrade may negate the ability to compile Jiffle scripts from the final application, by removing janino-x.y.z.jar from the classpath.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/24xxx/CVE-2022-24816.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-94\",\"description\":\"CWE-94: Improper Control of Generation of Code ('Code Injection')\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/24xxx/CVE-2022-24816.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":10,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"CHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2022-24816:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-24816", "sourcePath": "retained:/originalText", "text": "OSGeo GeoServer JAI-EXT contains a code injection vulnerability that, when programs use jt-jiffle and allow Jiffle script to be provided via network request, could allow remote code execution.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2022-24816:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-24816", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-24816", "modifiedAt": "2024-06-26T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:15:42.188Z", "fetchedAt": "2026-10-24T05:16:01.848Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-06-26T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "jai-extにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:16:01.848Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "9fedabf26251bda606812b334b0cacee51538baaca667441e63b3c4f977bb761", "sourceModifiedAt": "2025-10-21T23:15:42.188Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "JAI-EXTはJava Advanced Imaging APIを拡張するオープンソースプロジェクトです。ネットワーク要求でJiffleスクリプトを提供できるプログラムは、JaninoでJavaコードにコンパイルされ実行されるため、リモートコード実行が可能になります。特に下流のGeoServerプロジェクトに影響します。バージョン1.2.22には、スクリプトへの悪意あるコード注入を無効化するパッチが含まれます。アップグレードできない場合は、janino‑x.y.z.jar をクラスパスから除去することで、最終アプリケーションからJiffleスクリプトのコンパイル機能を無効化できます。", "risk": "攻撃者はリモートから任意のコードを実行させられる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E3" ], "applicability": [ { "text": "プログラムが jt‑jiffle を使用していること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/24xxx/CVE-2022-24816.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "Jiffle スクリプトをネットワーク要求で受け取れること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/24xxx/CVE-2022-24816.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "受け取ったスクリプトが Janino により Java コードにコンパイルされ実行されること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/24xxx/CVE-2022-24816.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：geosolutions-it / jai-ext。影響ありとして記載：< 1.1.22。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/24xxx/CVE-2022-24816.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-24816" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/24xxx/CVE-2022-24816.json" ], "evidenceIds": [ "E4" ] }, { "text": "「jai-ext」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2022-24816", "https://github.com/geosolutions-it/jai-ext/security/advisories/GHSA-v92f-jx6p-73rx", "https://github.com/geosolutions-it/jai-ext/commit/cb1d6565d38954676b0a366da4f965fef38da1cb", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-24816", "https://github.com/geosolutions-it/jai-ext/releases/tag/1.1.22", "https://nvd.nist.gov/vuln/detail/CVE-2022-24816" ] } ], "actions": [ { "text": "公式の対策欄では、次の対応は公開予定の版について示されています。入手できることを前提にせず、現在の提供状況と適用時期を管理担当者・提供元に確認してください。公開された場合の対応：バージョン1.2.22にアップグレードするか、janino‑x.y.z.jar をクラスパスから除去してコード注入を防止する。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/24xxx/CVE-2022-24816.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-24816" ], "evidenceIds": [ "E1", "E5" ] } ], "temporaryMitigations": [ { "text": "janino‑x.y.z.jar をクラスパスから除去して、Jiffle スクリプトのコンパイル機能を無効化する。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/24xxx/CVE-2022-24816.json" ], "evidenceIds": [ "E1" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/24xxx/CVE-2022-24816.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2022-24816", "https://github.com/geosolutions-it/jai-ext/security/advisories/GHSA-v92f-jx6p-73rx", "https://github.com/geosolutions-it/jai-ext/commit/cb1d6565d38954676b0a366da4f965fef38da1cb", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-24816", "https://github.com/geosolutions-it/jai-ext/releases/tag/1.1.22", "https://nvd.nist.gov/vuln/detail/CVE-2022-24816" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/24xxx/CVE-2022-24816.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-24816", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2022-24816", "label": "CVE公式レコード" }, { "url": "https://github.com/geosolutions-it/jai-ext/security/advisories/GHSA-v92f-jx6p-73rx", "label": "CISAが示す関連情報" }, { "url": "https://github.com/geosolutions-it/jai-ext/commit/cb1d6565d38954676b0a366da4f965fef38da1cb", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/geosolutions-it/jai-ext/releases/tag/1.1.22", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-24816", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/24xxx/CVE-2022-24816.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "JAI-EXT is an open-source project which aims to extend the Java Advanced Imaging (JAI) API. Programs allowing Jiffle script to be provided via network request can lead to a Remote Code Execution as the Jiffle script is compiled into Java code via Janino, and executed. In particular, this affects the downstream GeoServer project. Version 1.2.22 will contain a patch that disables the ability to inject malicious code into the resulting script. Users unable to upgrade may negate the ability to compile Jiffle scripts from the final application, by removing janino-x.y.z.jar from the classpath.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/24xxx/CVE-2022-24816.json", "sourceField": "/containers/cna/title", "excerpt": "Improper Control of Generation of Code in jai-ext", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-24816", "sourceField": "retained:/originalText", "excerpt": "OSGeo GeoServer JAI-EXT contains a code injection vulnerability that, when programs use jt-jiffle and allow Jiffle script to be provided via network request, could allow remote code execution.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/24xxx/CVE-2022-24816.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"jai-ext\",\"vendor\":\"geosolutions-it\",\"versions\":[{\"status\":\"affected\",\"version\":\"< 1.1.22\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-24816", "sourceField": "retained:/sourceAction", "excerpt": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-24816", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2022-24816\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2022-24816（jai-ext）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・プログラムが jt‑jiffle を使用していること。\n・Jiffle スクリプトをネットワーク要求で受け取れること。\n・受け取ったスクリプトが Janino により Java コードにコンパイルされ実行されること。\n・公式の対象表：geosolutions-it / jai-ext。影響ありとして記載：< 1.1.22。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2022-24816\n\n公式資料で追加確認が必要な点：\n・公式情報では 1.2.22 が公開予定または未リリースとして記載されています。", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [ { "code": "planned_release", "text": "公式情報では 1.2.22 が公開予定または未リリースとして記載されています。", "evidenceIds": [ "E1" ] } ], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:16:01.848Z", "lastSuccess": "2026-10-24T05:16:01.848Z", "sourceCheckedAt": "2026-10-24T05:16:01.848Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2022-2586", "aliases": [], "title": "linux：脆弱性情報", "summary": "nft オブジェクトや式が別の nft テーブル上の nft セットを参照できるため、そのテーブルが削除されると use‑after‑free が発生します。", "risk": "ローカルの攻撃者が特権をエスカレートできる可能性があります。", "product": "linux", "category": "linux", "component": "package", "severity": "medium", "cvss": 5.3, "cvssVersion": "3.1", "cvssSource": "canonical", "cvssVector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H", "affected": [ { "product": "linux", "range": ">= 3.16 / < 4.14.316（環境: Linux）" }, { "product": "linux", "range": ">= 4.15 / < 4.19.256（環境: Linux）" }, { "product": "linux", "range": ">= 4.20 / < 5.4.211（環境: Linux）" }, { "product": "linux", "range": ">= 5.5 / < 5.10.137（環境: Linux）" }, { "product": "linux", "range": ">= 5.11 / < 5.15.61（環境: Linux）" }, { "product": "linux", "range": ">= 5.16 / < 5.18.18（環境: Linux）" }, { "product": "linux", "range": ">= 5.19 / < 5.19.2（環境: Linux）" } ], "fixed": [], "steps": [ "ベンダーの指示に従って更新を適用するか、更新が入手できない場合は製品の使用を中止します。", "「CVE-2022-2586」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "利用しているLinuxの配布元が示す、このCVEへの修正パッケージを管理者に適用してもらいます。Ubuntu Desktopでは「ソフトウェアの更新」から提供された更新を適用できます。サーバーや他の配布元では、それぞれの正規の更新手順に従います。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/2xxx/CVE-2022-2586.json", "label": "CVE：canonical" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-2586", "label": "CISA KEV（悪用確認）" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-794697.html", "label": "CVE：canonical" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2022-2586", "label": "CVE公式レコード" }, { "url": "https://ubuntu.com/security/notices/USN-5564-1", "label": "CVE掲載の参考情報" }, { "url": "https://ubuntu.com/security/notices/USN-5560-2", "label": "CVE掲載の参考情報" }, { "url": "https://ubuntu.com/security/notices/USN-5582-1", "label": "CVE掲載の参考情報" }, { "url": "https://ubuntu.com/security/notices/USN-5567-1", "label": "CVE掲載の参考情報" }, { "url": "https://ubuntu.com/security/notices/USN-5560-1", "label": "CVE掲載の参考情報" }, { "url": "https://ubuntu.com/security/notices/USN-5566-1", "label": "CVE掲載の参考情報" }, { "url": "https://www.openwall.com/lists/oss-security/2022/08/09/5", "label": "CVE掲載の参考情報" }, { "url": "https://ubuntu.com/security/notices/USN-5565-1", "label": "CVE掲載の参考情報" }, { "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-1118/", "label": "CVE掲載の参考情報" }, { "url": "https://lore.kernel.org/netfilter-devel/20220809170148.164591-1-cascardo@canonical.com/T/#t", "label": "CVE掲載の参考情報" }, { "url": "https://seclists.org/oss-sec/2022/q3/131", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-2586", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://documentation.ubuntu.com/security/security-updates/", "label": "Ubuntu公式：セキュリティ更新と修正の確認" }, { "url": "https://access.redhat.com/solutions/57665", "label": "Red Hat公式：古い版への修正の取り込み" } ], "publishedAt": "2024-01-08T17:46:06.110Z", "modifiedAt": "2026-10-14T13:11:40.118Z", "fetchedAt": "2026-10-24T05:16:03.096Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "The Linux Kernel Organization", "product": "linux", "platforms": [ "Linux" ], "packageName": "linux", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git", "versions": [ { "status": "affected", "version": "3.16", "lessThan": "4.14.316", "versionType": "semver" }, { "status": "affected", "version": "4.15", "lessThan": "4.19.256", "versionType": "semver" }, { "status": "affected", "version": "4.20", "lessThan": "5.4.211", "versionType": "semver" }, { "status": "affected", "version": "5.5", "lessThan": "5.10.137", "versionType": "semver" }, { "status": "affected", "version": "5.11", "lessThan": "5.15.61", "versionType": "semver" }, { "status": "affected", "version": "5.16", "lessThan": "5.18.18", "versionType": "semver" }, { "status": "affected", "version": "5.19", "lessThan": "5.19.2", "versionType": "semver" } ], "defaultStatus": "unaffected" } ], "configurationNotes": "対象環境・機能: Linux。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2022-2586", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/2xxx/CVE-2022-2586.json", "fetchedAt": "2026-10-24T05:16:03.096Z", "publishedAt": "2024-01-08T17:46:06.110Z", "modifiedAt": "2026-10-14T13:11:40.118Z", "state": "published", "provider": "canonical", "title": "", "descriptions": [ { "lang": "en", "value": "It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Linux Kernel contains a use-after-free vulnerability in the nft_object, allowing local attackers to escalate privileges.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-2586", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "The Linux Kernel Organization", "product": "linux", "sourcePath": "/containers/cna/affected/0", "packageName": "linux", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git", "defaultStatus": "unaffected", "platforms": [ "Linux" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "3.16", "lessThan": "4.14.316", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "4.15", "lessThan": "4.19.256", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "4.20", "lessThan": "5.4.211", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "5.5", "lessThan": "5.10.137", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "5.11", "lessThan": "5.15.61", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "5.16", "lessThan": "5.18.18", "versionType": "semver", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "5.19", "lessThan": "5.19.2", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-416", "lang": "en", "description": "CWE-416", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H", "baseScore": 5.3, "baseSeverity": "MEDIUM", "provider": "canonical", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://ubuntu.com/security/notices/USN-5564-1", "label": "CVE", "tags": [ "third-party-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://ubuntu.com/security/notices/USN-5560-2", "label": "CVE", "tags": [ "third-party-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://ubuntu.com/security/notices/USN-5582-1", "label": "CVE", "tags": [ "third-party-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/2" }, { "url": "https://ubuntu.com/security/notices/USN-5567-1", "label": "CVE", "tags": [ "third-party-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/3" }, { "url": "https://ubuntu.com/security/notices/USN-5560-1", "label": "CVE", "tags": [ "third-party-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/4" }, { "url": "https://ubuntu.com/security/notices/USN-5566-1", "label": "CVE", "tags": [ "third-party-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/5" }, { "url": "https://www.openwall.com/lists/oss-security/2022/08/09/5", "label": "CVE", "tags": [ "issue-tracking", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/6" }, { "url": "https://ubuntu.com/security/notices/USN-5565-1", "label": "CVE", "tags": [ "third-party-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/7" }, { "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-1118/", "label": "CVE", "tags": [ "issue-tracking", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/8" }, { "url": "https://lore.kernel.org/netfilter-devel/20220809170148.164591-1-cascardo@canonical.com/T/#t", "label": "CVE", "tags": [ "issue-tracking", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/9" }, { "url": "https://ubuntu.com/security/notices/USN-5562-1", "label": "CVE", "tags": [ "third-party-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/10" }, { "url": "https://ubuntu.com/security/notices/USN-5557-1", "label": "CVE", "tags": [ "third-party-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/11" }, { "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2586", "label": "CVE", "tags": [ "issue-tracking", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/12" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-2586", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.vicarius.io/vsociety/posts/use-after-free-vulnerability-linked-chain-between-nft-tables-cve-2022-2586", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/13" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-794697.html", "label": "siemens-SADP", "tags": [], "provider": "siemens-SADP", "sourcePath": "/containers/adp/2/references/0" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-806742.html", "label": "siemens-SADP", "tags": [], "provider": "siemens-SADP", "sourcePath": "/containers/adp/2/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/2xxx/CVE-2022-2586.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"The Linux Kernel Organization\",\"product\":\"linux\",\"platforms\":[\"Linux\"],\"packageName\":\"linux\",\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git\",\"versions\":[{\"status\":\"affected\",\"version\":\"3.16\",\"lessThan\":\"4.14.316\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"4.15\",\"lessThan\":\"4.19.256\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"4.20\",\"lessThan\":\"5.4.211\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"5.5\",\"lessThan\":\"5.10.137\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"5.11\",\"lessThan\":\"5.15.61\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"5.16\",\"lessThan\":\"5.18.18\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"5.19\",\"lessThan\":\"5.19.2\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/2xxx/CVE-2022-2586.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/2xxx/CVE-2022-2586.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-416\",\"description\":\"CWE-416\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/2xxx/CVE-2022-2586.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"baseSeverity\":\"MEDIUM\",\"baseScore\":5.3,\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2022-2586:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-2586", "sourcePath": "retained:/originalText", "text": "Linux Kernel contains a use-after-free vulnerability in the nft_object, allowing local attackers to escalate privileges.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2022-2586:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-2586", "sourcePath": "retained:/sourceAction", "text": "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "linked:https://cert-portal.siemens.com/productcert/html/ssa-794697.html", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-794697.html", "sourcePath": "details.cve-detail:#cve-2022-2586", "text": "SSA-794697\n\nVulnerability CVE-2022-2586\n\nA use-after-free flaw was found in nf_tables cross-table in the net/netfilter/nf_tables_api.c function in the Linux kernel. This flaw allows a local, privileged attacker to cause a use-after-free problem at the time of table deletion, possibly leading to local privilege escalation.\n\nCVSS v3.1 Base Score\n6.7\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C\n\nCWE\nCWE-416: Use After Free", "truncated": false, "representation": "html_text_excerpt", "relatedCve": "CVE-2022-2586", "relatedCves": [ "CVE-2022-2586" ], "scopeNote": "当該CVEの個別説明・評価だけを取得。機種ごとの対象範囲・対策表との対応は確定していないため、共通の修正版として利用しません。" }, { "evidenceId": "linked:https://cert-portal.siemens.com/productcert/html/ssa-806742.html", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-806742.html", "sourcePath": "details.cve-detail:#cve-2022-2586", "text": "SSA-806742\n\nVulnerability CVE-2022-2586\n\nA use-after-free flaw was found in nf_tables cross-table in the net/netfilter/nf_tables_api.c function in the Linux kernel. This flaw allows a local, privileged attacker to cause a use-after-free problem at the time of table deletion, possibly leading to local privilege escalation.\n\nCVSS v3.1 Base Score\n6.7\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C\n\nCWE\nCWE-416: Use After Free", "truncated": false, "representation": "html_text_excerpt", "relatedCve": "CVE-2022-2586", "relatedCves": [ "CVE-2022-2586" ], "scopeNote": "当該CVEの個別説明・評価だけを取得。機種ごとの対象範囲・対策表との対応は確定していないため、共通の修正版として利用しません。" } ], "limits": { "completeness": "bounded", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。 当該CVEを本文中に明記した、直接参照された公的機関・開発元の告知を追加しています。複数製品・CVEを含む告知の対策は、その製品・CVEとの対応関係を維持してください。 Siemensの複数CVE告知は当該CVEの個別節だけを取得しています。機種別の対象・対策表の対応は未確定のため省略しています。", "excludedLinkedSources": [], "scopedLinkedSources": [ { "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-794697.html", "sourcePath": "details.cve-detail:#cve-2022-2586", "note": "当該CVEの個別説明・評価だけを取得。機種ごとの対象範囲・対策表との対応は確定していないため、共通の修正版として利用しません。" }, { "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-806742.html", "sourcePath": "details.cve-detail:#cve-2022-2586", "note": "当該CVEの個別説明・評価だけを取得。機種ごとの対象範囲・対策表との対応は確定していないため、共通の修正版として利用しません。" } ] }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-2586", "modifiedAt": "2024-06-26T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true }, { "sourceType": "Siemens ProductCERT", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-794697.html", "title": "SSA-794697", "relatedCves": [ "CVE-2022-2586" ] }, { "sourceType": "Siemens ProductCERT", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-806742.html", "title": "SSA-806742", "relatedCves": [ "CVE-2022-2586" ] } ], "relatedDocuments": [ { "type": "html", "sourceType": "Siemens ProductCERT", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-794697.html", "title": "SSA-794697", "relatedCves": [ "CVE-2022-2586" ], "truncated": false }, { "type": "html", "sourceType": "Siemens ProductCERT", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-806742.html", "title": "SSA-806742", "relatedCves": [ "CVE-2022-2586" ], "truncated": false } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-14T13:11:40.118Z", "fetchedAt": "2026-10-24T05:16:03.096Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2024-06-26T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.", "sourceSummary": "linuxに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T05:16:03.096Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "605ed5c4657152dc0bbf5090e48fd0e76e3eaae4f8688acf829cb673a827e936", "sourceModifiedAt": "2026-10-14T13:11:40.118Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "nft オブジェクトや式が別の nft テーブル上の nft セットを参照できるため、そのテーブルが削除されると use‑after‑free が発生します。", "risk": "ローカルの攻撃者が特権をエスカレートできる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E2", "E3" ], "applicability": [ { "text": "ローカルの攻撃者が特権を持っていること。", "kind": "fact", "sourceUrls": [ "https://cert-portal.siemens.com/productcert/html/ssa-794697.html" ], "evidenceIds": [ "E3" ] }, { "text": "nft テーブルが削除されること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/2xxx/CVE-2022-2586.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：The Linux Kernel Organization / linux。影響ありとして記載：3.16以上、4.14.316未満。影響ありとして記載：4.15以上、4.19.256未満。影響ありとして記載：4.20以上、5.4.211未満。影響ありとして記載：5.5以上、5.10.137未満。影響ありとして記載：5.11以上、5.15.61未満。影響ありとして記載：5.16以上、5.18.18未満。影響ありとして記載：5.19以上、5.19.2未満。対象の環境：Linux", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/2xxx/CVE-2022-2586.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-2586" ], "evidenceIds": [ "E7" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/2xxx/CVE-2022-2586.json" ], "evidenceIds": [ "E4" ] }, { "text": "管理担当者に、Linuxの種類（Ubuntu、Red Hatなど）と版、対象パッケージ名、配布元を含む完全なパッケージ番号を確認してもらいます。OSの種類や製品の上流の番号だけで、影響の有無を決めないでください。", "kind": "procedure", "sourceUrls": [ "https://documentation.ubuntu.com/security/security-updates/", "https://access.redhat.com/solutions/57665" ] } ], "actions": [ { "text": "ベンダーの指示に従って更新を適用するか、更新が入手できない場合は製品の使用を中止します。", "kind": "fix", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-2586" ], "evidenceIds": [ "E5", "E6" ] }, { "text": "「CVE-2022-2586」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2022-2586", "https://ubuntu.com/security/notices/USN-5564-1", "https://ubuntu.com/security/notices/USN-5560-2", "https://ubuntu.com/security/notices/USN-5582-1", "https://ubuntu.com/security/notices/USN-5567-1", "https://ubuntu.com/security/notices/USN-5560-1", "https://ubuntu.com/security/notices/USN-5566-1", "https://www.openwall.com/lists/oss-security/2022/08/09/5", "https://ubuntu.com/security/notices/USN-5565-1", "https://www.zerodayinitiative.com/advisories/ZDI-22-1118/", "https://lore.kernel.org/netfilter-devel/20220809170148.164591-1-cascardo@canonical.com/T/#t", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-2586", "https://seclists.org/oss-sec/2022/q3/131", "https://nvd.nist.gov/vuln/detail/CVE-2022-2586" ] }, { "text": "利用しているLinuxの配布元が示す、このCVEへの修正パッケージを管理者に適用してもらいます。Ubuntu Desktopでは「ソフトウェアの更新」から提供された更新を適用できます。サーバーや他の配布元では、それぞれの正規の更新手順に従います。", "kind": "procedure", "sourceUrls": [ "https://documentation.ubuntu.com/security/security-updates/", "https://access.redhat.com/solutions/57665" ] } ], "temporaryMitigations": [ { "text": "更新が用意されていない場合は、配布元や保守会社へCVE番号とパッケージ番号を送り、影響の有無・回避策・提供予定を確認します。他のLinux向けの修正をそのまま入れないでください。", "kind": "procedure", "sourceUrls": [ "https://documentation.ubuntu.com/security/security-updates/", "https://access.redhat.com/solutions/57665" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/2xxx/CVE-2022-2586.json" ], "evidenceIds": [ "E4" ] }, { "text": "修正後の完全なパッケージ番号と、その配布元のCVE対応表を照合します。古い番号のまま修正を取り込む場合があるため、数字が小さいという理由だけで未修正とは扱いません。管理者に必要な再起動の完了も確認してもらってください。", "kind": "procedure", "sourceUrls": [ "https://documentation.ubuntu.com/security/security-updates/", "https://access.redhat.com/solutions/57665" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。", "長い公式資料の一部を使って解説しています。対象製品・版・構成の全一覧は、併記した構造化データも管理担当者と照合してください。", "公式資料が長いため、取得できた一部の内容に基づく説明です。対象の版・例外・構成条件が省略されている可能性があるため、取得範囲だけで対象外とは判断しないでください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/2xxx/CVE-2022-2586.json", "label": "CVE：canonical" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-2586", "label": "CISA KEV（悪用確認）" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-794697.html", "label": "CVE：canonical" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2022-2586", "label": "CVE公式レコード" }, { "url": "https://ubuntu.com/security/notices/USN-5564-1", "label": "CVE掲載の参考情報" }, { "url": "https://ubuntu.com/security/notices/USN-5560-2", "label": "CVE掲載の参考情報" }, { "url": "https://ubuntu.com/security/notices/USN-5582-1", "label": "CVE掲載の参考情報" }, { "url": "https://ubuntu.com/security/notices/USN-5567-1", "label": "CVE掲載の参考情報" }, { "url": "https://ubuntu.com/security/notices/USN-5560-1", "label": "CVE掲載の参考情報" }, { "url": "https://ubuntu.com/security/notices/USN-5566-1", "label": "CVE掲載の参考情報" }, { "url": "https://www.openwall.com/lists/oss-security/2022/08/09/5", "label": "CVE掲載の参考情報" }, { "url": "https://ubuntu.com/security/notices/USN-5565-1", "label": "CVE掲載の参考情報" }, { "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-1118/", "label": "CVE掲載の参考情報" }, { "url": "https://lore.kernel.org/netfilter-devel/20220809170148.164591-1-cascardo@canonical.com/T/#t", "label": "CVE掲載の参考情報" }, { "url": "https://seclists.org/oss-sec/2022/q3/131", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-2586", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://documentation.ubuntu.com/security/security-updates/", "label": "Ubuntu公式：セキュリティ更新と修正の確認" }, { "url": "https://access.redhat.com/solutions/57665", "label": "Red Hat公式：古い版への修正の取り込み" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/2xxx/CVE-2022-2586.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-2586", "sourceField": "retained:/originalText", "excerpt": "Linux Kernel contains a use-after-free vulnerability in the nft_object, allowing local attackers to escalate privileges.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-794697.html", "sourceField": "details.cve-detail:#cve-2022-2586", "excerpt": "SSA-794697\n\nVulnerability CVE-2022-2586\n\nA use-after-free flaw was found in nf_tables cross-table in the net/netfilter/nf_tables_api.c function in the Linux kernel. This flaw allows a local, privileged attacker to cause a use-after-free problem at the time of table deletion, possibly leading to local privilege escalation.\n\nCVSS v3.1 Base Score\n6.7\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C\n\nCWE\nCWE-416: Use After Free", "language": null, "representation": "html_text_excerpt" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2022/2xxx/CVE-2022-2586.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"The Linux Kernel Organization\",\"product\":\"linux\",\"platforms\":[\"Linux\"],\"packageName\":\"linux\",\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git\",\"versions\":[{\"status\":\"affected\",\"version\":\"3.16\",\"lessThan\":\"4.14.316\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"4.15\",\"lessThan\":\"4.19.256\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"4.20\",\"lessThan\":\"5.4.211\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"5.5\",\"lessThan\":\"5.10.137\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"5.11\",\"lessThan\":\"5.15.61\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"5.16\",\"lessThan\":\"5.18.18\",\"versionType\":\"semver\"},{\"status\":\"affected\",\"version\":\"5.19\",\"lessThan\":\"5.19.2\",\"versionType\":\"semver\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-2586", "sourceField": "retained:/sourceAction", "excerpt": "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.", "language": null, "representation": "retained_feed_field" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-2586", "sourceField": "/sourceAction", "excerpt": "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.", "language": null }, { "id": "E7", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-2586", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2022-2586\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2022-2586（linux）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・ローカルの攻撃者が特権を持っていること。\n・nft テーブルが削除されること。\n・公式の対象表：The Linux Kernel Organization / linux。影響ありとして記載：3.16以上、4.14.316未満。影響ありとして記載：4.15以上、4.19.256未満。影響ありとして記載：4.20以上、5.4.211未満。影響ありとして記載：5.5以上、5.10.137未満。影響ありとして記載：5.11以上、5.15.61未満。影響ありとして記載：5.16以上、5.18.18未満。影響ありとして記載：5.19以上、5.19.2未満。対象の環境：Linux\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2022-2586", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T05:16:03.096Z", "lastSuccess": "2026-10-24T05:16:03.096Z", "sourceCheckedAt": "2026-10-24T05:16:03.096Z", "errorCode": null }, "glossary": [] } } ], "total": 2279, "limit": 20, "offset": 1120, "filters": { "product": "all", "type": "all", "q": "", "page": 57 }, "pagination": { "page": 57, "pageSize": 20, "totalPages": 114 }, "sources": [ { "name": "JVN", "status": "ok", "lastSuccess": "2026-10-25T00:17:49.526Z", "lastAttempt": "2026-10-25T00:17:49.526Z", "error": null, "recordCount": 20, "coverage": "JVNの新着・更新RSS。取得した記事を蓄積。JVN iPediaは含みません。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "PHP Security", "status": "ok", "lastSuccess": "2026-10-25T00:17:49.526Z", "lastAttempt": "2026-10-25T00:17:49.526Z", "error": null, "recordCount": 66, "coverage": "PHP開発元の公開アドバイザリ。公開日が新しい順とは限らない直近100件を取得し蓄積。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CISA KEV", "status": "ok", "lastSuccess": "2026-10-25T00:17:49.526Z", "lastAttempt": "2026-10-25T00:17:49.526Z", "error": null, "recordCount": 1756, "coverage": "CISAの公式GitHubミラーにある悪用確認済み一覧全件。掲載日はKEV追加日。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "NVD", "status": "partial", "lastSuccess": "2026-10-24T16:17:49.075Z", "lastAttempt": "2026-10-25T00:17:49.526Z", "error": "未確認のページ・期間は次回の定期取得で続きから反映します。", "recordCount": 5, "coverage": "WordPressを含む脆弱性。初回は公開7日分、以降は全製品の変更分からWordPressと保存済みIDを追跡。停止後は最後に確認できた時刻から最大7日幅・500件ずつ再開し、残りは次回取得。 今回: 2026-10-24T16:02:49.075Z 〜 2026-10-24T22:17:49.743Z、全製品の変更 1500/3194件まで確認、対象5件反映。", "cursor": { "start": "2026-10-24T16:02:49.075Z", "end": "2026-10-24T22:17:49.743Z", "kind": "modified", "index": 1500 }, "freshness": "stale", "stale": true }, { "name": "CVE", "status": "ok", "lastSuccess": "2026-10-25T00:17:49.526Z", "lastAttempt": "2026-10-25T00:17:49.526Z", "error": null, "recordCount": 6, "coverage": "取得したPHP/JVN情報のうち、公開日が新しい最大6件のCVE公式レコードで条件を補足。", "cursor": null, "freshness": "fresh", "stale": false } ] }