Improper Ownership Management
CVE-2024-39755
Summary
A privilege escalation vulnerability exists in the node update functionality of Veertu Anka Build 1.42.0. A specially crafted PKG file can lead to execute priviledged operation. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
- LOW
- LOCAL
- HIGH
- UNCHANGED
- NONE
- LOW
- HIGH
- HIGH
CWE-282 - Improper Ownership Management
The software assigns the wrong ownership, or does not properly verify the ownership, of an object or resource.
References
Advisory Timeline
- Published
