CVE-2024-23768
CVSS 3.1 Score 8.8 of 10 (high)
Details
Summary
CVE-2024-23768 is a new vulnerability affecting Dremio versions 24.0.0 through 23.2.3, and 22.0.0 through 22.2.2. This path traversal issue enables authenticated users with no privileges on certain folders to gain unauthorized access to those folders, files, and datasets. Successful exploitation relies on the user having access to the source and at least one folder in the source. The vulnerability affects Dremio versions 24.3.0 and earlier, 23.2.3 and earlier, and 22.2.2 and earlier. Version 24.3.1 and later, as well as 23.2.4 and later, and 22.2.3 and later, are considered fixed.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions