Ansible Playbook Exploit Allows Remote Code Execution in Celery Container

CVE-2024-40629

What is CVE-2024-40629?

JumpServer, a widely-used open-source Privileged Access Management tool, contains a vulnerability that allows attackers to exploit the Ansible playbook functionality. This exploitation enables the writing of arbitrary files, which can lead to remote code execution within the Celery container that operates with root permissions. The implications of this vulnerability are significant, as it grants attackers access to sensitive database information, the ability to steal secret credentials, create unauthorized admin accounts on JumpServer, and manipulate database contents. Affected users are advised to update to versions 3.10.12 or later, and 4.0.0 to mitigate this risk. Currently, there are no known workarounds available.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References