CVE-2024-28718 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	9.8 CRITICAL	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 78%

Affected Products (NVD)

Vendor	Product	Version
openstack	magnum	-

𝑥

= Vulnerable software versions

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources.

Vendor	Product	Version	Source
openstack	magnum-yoga-eom	𝑥 < *	ADP

Ubuntu Releases

Ubuntu Product

Codename

magnum

bionic	needs-triage
focal	needs-triage
jammy	needs-triage
mantic	ignored
noble	needs-triage
oracular	ignored
plucky	needs-triage
questing	needs-triage
xenial	needs-triage

Known Exploits!

Common Weakness Enumeration

CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition
The software checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the software to perform invalid actions when the resource is in an unexpected state.

References

https://bugs.launchpad.net/magnum/+bug/2047690

https://gist.github.com/Fewword/f098d8d6375ac25e27b18c0e57be532f

https://review.opendev.org/c/openstack/magnum/+/907305

https://bugs.launchpad.net/magnum/+bug/2047690

https://gist.github.com/Fewword/f098d8d6375ac25e27b18c0e57be532f

https://review.opendev.org/c/openstack/magnum/+/907305