CVE-2024-7634CWE-22
NGINX Agent Vulnerability
Medium · published August 22, 2024
What it is
NGINX Agent's "config_dirs" restriction feature allows a highly privileged attacker to gain the ability to write/overwrite files outside of the designated secure directory.
The record
Technical detail
- CVSS v4.0
- 6.9 · MEDIUM
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
- EPSS
- 0.00471 · 39.8th percentile
- Weakness
- CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
- Published
- 2024-08-22T18:07Z
EPSS history
Timeline