CVE-2024-45187CWE-613

Mage AI allows deleted users to use the terminal server with admin access, leading to remote code execution

High · published August 23, 2024

CVSS v3.1
7.1
EPSS
0%
Percentile
41.6
In the wild
Unconfirmed
What it is

Guest users in the Mage AI framework that remain logged in after their accounts are deleted, are mistakenly given high privileges and specifically given access to remotely execute arbitrary code through the Mage AI terminal server

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00495 · 41.6th percentile
Weakness
CWE-613 · Insufficient Session Expiration
Published
2024-08-23T18:58Z
EPSS history
Timeline
  • 23 AUG 18:58Z
    Mage AI allows deleted users to use the terminal server with admin access, leading to remote code execution
    cvelistv5