CVE-2024-49504 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	UNKNOWN				---
suse	CNA	---				---
CISA-ADP	ADP	---				---

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 17%

Debian Releases

Debian Product

Codename

grub2

bullseye (security)	2.06-3~deb11u6 fixed
bullseye	2.06-3~deb11u6 fixed
bookworm	2.06-13+deb12u1 fixed
bookworm (security)	2.06-13+deb12u1 fixed
sid	2.12-7 fixed
trixie	2.12-7 fixed

Common Weakness Enumeration

CWE-276 - Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.

References

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-49504