Skip to content
fr Sign in
4.9 Medium

CVE-2024-7634 NGINX Agent's "config_dirs" restriction feature allows a highly privileged attacker to gain the ability to…

Description

NGINX Agent's "config_dirs" restriction feature allows a highly privileged attacker to gain the ability to write/overwrite files outside of the designated secure directory.

Affected products and versions

Product Affected versions Fixed in
NGINX Agent 2.17 2.17.0 → < 2.37.0 2.37.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of NGINX Agent

The 3 CVEs of NGINX Agent →
CVE-2026-60062 The NGINX Agent config_dirs directive allows a low-privileged attacker to gain limited read and write access to files… 6.4 Medium CVE-2023-1550 Insertion of Sensitive Information into log file vulnerability in NGINX Agent 5.5 Medium
Track this CVE