Skip to content
Sign in
7.2 High

CVE-2024-8531 CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center…

Description

CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center Expert software when an upgrade bundle is manipulated to include arbitrary bash scripts that are executed as root.

Affected products and versions

Product Affected versions Fixed in
Data Center Expert Versions not published
data_center_expert 8.1 earliest → 8.1.1.3 No fix stated

Other CVEs of Data Center Expert

The 6 CVEs of Data Center Expert →
CVE-2024-8530 CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause exposure of private data… 5.9 Medium CVE-2022-32520 A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE… 8.0 High CVE-2022-32521 A CWE 502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the… 7.1 High CVE-2022-32518 A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE… 8.0 High
Track this CVE