CVE-2024-2097

Summary

CVE-2024-2097 is a newly identified vulnerability affecting SCM (Source Code Management) Servers. This authenticated List control issue allows a malicious client to execute arbitrary code remotely (RCE) by sending a crafted LINQ (Language-Integrated Query) query. The vulnerability enables an attacker, who otherwise lacks the necessary authorization, to gain unauthorized access and potentially cause significant damage to the affected system. The LINQ query is processed by the SCM Server, leading to the execution of the attacker's code, highlighting the importance of proper input validation and access control mechanisms to mitigate the risk of such attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.