CVE-2024-24897

Summary

CVE-2024-24897 is aCommand Injection vulnerability affecting the openEuler A-Tune-Collector on Linux. This issue arises due to improper neutralization of special elements in the input of the sched.Py file, located in the plugin/monitor/process directory. As a result, an attacker can inject malicious commands into the system, potentially compromising it. The vulnerability is present in A-Tune-Collector versions from 1.1.0-3 to 1.3.0.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.