« Volver al listado

CVE-2024-38824

Estado: AnalizadaAlta (7.5)—

Directory traversal vulnerability in recv_file method allows arbitrary files to be written to the master cache directory.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Directory traversal (CWE-22) en servicio remoto sin autenticación (AV:N, PR:N) permite escritura arbitraria de archivos en caché del master (I:H), técnica de manipulación; acceso potencial a datos confidenciales del servidor.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Vulnerability ScanningRestrict File and Directory PermissionsPrivileged Account ManagementRemote Data StorageNetwork SegmentationLimit Access to Resource Over Network

Tecnologías afectadas (1)

Saltstack — Salt

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-38824",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-38824",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-06-14T03:56:04.670703Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@vmware.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 9.6,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.8,
        "exploitabilityScore": 3.1
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security@vmware.com",
      "affectedData": [
        {
          "vendor": "VMware",
          "product": "SALT",
          "versions": [
            {
              "status": "affected",
              "version": "3006.x",
              "lessThan": "3006.12",
              "versionType": "lts"
            },
            {
              "status": "affected",
              "version": "3007.x",
              "lessThan": "3007.4",
              "versionType": "sts"
            }
          ],
          "packageName": "Salt",
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-06-13T08:15:18.800",
  "references": [
    {
      "url": "https://docs.saltproject.io/en/3006/topics/releases/3006.12.html",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "source": "security@vmware.com"
    },
    {
      "url": "https://docs.saltproject.io/en/3007/topics/releases/3007.4.html",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "source": "security@vmware.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Directory traversal vulnerability in recv_file method allows arbitrary files to be written to the master cache directory."
    },
    {
      "lang": "es",
      "value": "La vulnerabilidad de directory traversal en el método recv_file permite que se escriban archivos arbitrarios en el directorio de caché maestro."
    }
  ],
  "lastModified": "2026-06-17T07:41:06.937",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E0966C55-6443-4CAD-B124-6EFADE3BAB15",
              "versionEndExcluding": "3006.12",
              "versionStartIncluding": "3006.0"
            },
            {
              "criteria": "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "385E7C05-24FA-46D5-BB78-DF1391959681",
              "versionEndExcluding": "3007.4",
              "versionStartIncluding": "3007.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@vmware.com"
}