Privilege Escalation Vulnerability in ClamXAV by Canimaan Software LTD
CVE-2024-24245

7.8HIGH

Key Information:

Vendor

Canimaan Software LTD

Status
ClamXAV
Vendor
CVE Published:
9 April 2024

What is CVE-2024-24245?

A local privilege escalation vulnerability in ClamXAV software allows attackers to exploit the ClamXAV helper tool to gain elevated access rights. This issue affects multiple versions ranging from 3.1.2 to 3.6.1, prompting immediate attention for users to upgrade to version 3.6.2 or later to mitigate potential security risks.

References

https://www.clamxav.com/version-history/

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.