CVE-2024-24897

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in openEuler A-Tune-Collector on Linux allows Command Injection. This vulnerability is associated with program files https://gitee.Com/openeuler/A-Tune-Collector/blob/master/atune_collector/plugin/monitor/process/sched.Py. This issue affects A-Tune-Collector: from 1.1.0-3 through 1.3.0.
Configurations

No configuration.

History

21 Nov 2024, 08:59

Type Values Removed Values Added
References () https://gitee.com/src-openeuler/A-Tune-Collector/pulls/45 - () https://gitee.com/src-openeuler/A-Tune-Collector/pulls/45 -
References () https://gitee.com/src-openeuler/A-Tune-Collector/pulls/47 - () https://gitee.com/src-openeuler/A-Tune-Collector/pulls/47 -
References () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1271 - () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1271 -
References () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1273 - () https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1273 -

25 Mar 2024, 13:47

Type Values Removed Values Added
Summary
  • (es) La neutralización inadecuada de elementos especiales utilizados en una vulnerabilidad de comando ("Inyección de comando") en openEuler A-Tune-Collector en Linux permite la inyección de comando. Esta vulnerabilidad está asociada con archivos de programa https://gitee.Com/openeuler/A-Tune-Collector/blob/master/atune_collector/plugin/monitor/process/sched.Py. Este problema afecta a A-Tune-Collector: desde 1.1.0-3 hasta 1.3.0.

25 Mar 2024, 07:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-03-25 07:15

Updated : 2024-11-21 08:59


NVD link : CVE-2024-24897

Mitre link : CVE-2024-24897

CVE.ORG link : CVE-2024-24897


JSON object : View

Products Affected

No product.

CWE
CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')