8.0
Élevée
CVE-2024-24914 Authenticated Gaia users can inject code or commands by global variables through special HTTP requests
Description
Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix that mitigates this vulnerability is available.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ClusterXL, Multi-Domain Security Management, Quantum Appliances, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Security Management | Versions non publiées | |
| clusterxl | Versions non publiées | |
| multi-domain_management | Versions non publiées | |
| quantum_appliances | Versions non publiées | |
| quantum_maestro | Versions non publiées | |
| quantum_scalable_chassis | Versions non publiées | |
| quantum_security_gateway | Versions non publiées | |
| quantum_security_management | Versions non publiées |