CVE-2024-2859

By default, SANnav OVA is shipped with root user login enabled (CVE-2024-2859)

Medium · published April 27, 2024

CVSS v3.1
6.8
EPSS
1%
Percentile
57.7
In the wild
Unconfirmed
What it is

By default, SANnav OVA is shipped with root user login enabled. While protected by a password, access to root could expose SANnav to a remote attacker should they gain access to the root account.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00848 · 57.7th percentile
Published
2024-04-27T00:06Z
EPSS history
Timeline
  • 27 APR 00:06Z
    By default, SANnav OVA is shipped with root user login enabled (CVE-2024-2859)
    cvelistv5