Arbitrary Code Execution Vulnerability in JumpServer's Ansible Could Lead to Sensitive Information Theft or Database Manipulation

CVE-2024-29201

What is CVE-2024-29201?

The vulnerability CVE-2024-29201 exists in JumpServer's Ansible, allowing attackers to execute arbitrary code within the Celery container. This can lead to potential sensitive information theft or database manipulation. The vulnerability affects versions v3.0.0-v3.10.6 and has a fixed version in v3.10.7. Due to the critical nature of the vulnerability, users are advised to apply the patch as soon as feasible to avoid potential exploitation in the wild.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

News Articles

app.soos.io

CVE-2024-29201

Security software, simplified.

SOOS • Don't get cocky with your app sec. Industry leading app sec, all in one dashboard.

CybersecurityNews

CVE-2024-29201CVE-2024-29202

JumpServer Critical Flaws Let Attackers Execute Arbitrary Code Remotely

The critical vulnerabilities in JumpServer's Ansible that allowed attackers to execute arbitrary remote code have been patched.

References