CVE-2024-29201
CRITICALCVSS v3
9.9
CRITICAL
EPSS Score
68.5%
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Description
JumpServer is an open source bastion host and an operation and maintenance security audit system. Attackers can bypass the input validation mechanism in JumpServer's Ansible to execute arbitrary code within the Celery container. Since the Celery container runs with root privileges and has database access, attackers could steal sensitive information from all hosts or manipulate the database. This vulnerability is fixed in v3.10.7.
Technical Details
- Published
- 3/29/2024
Frequently Asked Questions
What is CVE-2024-29201?
JumpServer is an open source bastion host and an operation and maintenance security audit system. Attackers can bypass the input validation mechanism in JumpServer's Ansible to execute arbitrary code within the Celery container. Since the Celery container runs with root privileges and has database access, attackers could steal sensitive information from all hosts or manipulate the database. This vulnerability is fixed in v3.10.7.
Is CVE-2024-29201 actively exploited?
Active exploitation of CVE-2024-29201 has not been confirmed. The EPSS score is 68.5%, indicating the estimated probability of exploitation in the next 30 days.
What is the CVSS score for CVE-2024-29201?
CVE-2024-29201 has a CVSS v3 base score of 9.9 (CRITICAL severity).
Is CVE-2024-29201 affecting your environment?
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.