VDB
BDU%3A2024-07876
BDU%3A2024-07876
PUBLISHED
CVSS 6.199999809265137 MEDIUM
Уязвимость реализации механизма OTP программного обеспечения аутентификации OATH Toolkit, позволяющая нарушителю повысить свои привилегии
Risk Scores
CVSS 2.0
6.199999809265137
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Novell Inc., Сообщество свободного программного обеспечения, Red Hat Inc., ООО «РусБИТех-Астра» | openSUSE Tumbleweed, Debian GNU/Linux, Red Hat Openshift Container Storage, Red Hat Ceph Storage, Astra Linux Special Edition (запись в едином реестре российских программ №369), OATH Toolkit |
Timeline
- Oct 9, 2024 CVE Published
- Jan 31, 2025 CVE Updated
References
- https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/3235a52f6b87cd1c5da6508f421ac261f5e33a70 url
- https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/3271139989fde35ab0163b558fc29e80c3a280e5 url
- https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/60d9902b5c20f27e70f8e9c816bfdc0467567e1a url
- https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/95ef255e6a401949ce3f67609bf8aac2029db418 url
- https://gitlab.com/oath-toolkit/oath-toolkit/-/issues/43 url
- https://security.opensuse.org/2024/10/04/oath-toolkit-vulnerability.html url
- https://www.nongnu.org/oath-toolkit/security/CVE-2024-47191 url
- https://www.openwall.com/lists/oss-security/2024/10/04/2 url
- https://www.securitylab.ru/news/552825.php url
- https://vuldb.com/?id.279401 url
- https://access.redhat.com/security/cve/cve-2024-47191 url
- https://security-tracker.debian.org/tracker/CVE-2024-47191 url
- https://www.suse.com/security/cve/CVE-2024-47191.html url
- https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0114SE18MD url