CVE-2024-22029: Tomcat Packaging Permissions race to root
CVE-2024-22029 Published on October 16, 2024

tomcat packaging allows for escalation to root from tomcat user
Insecure permissions in the packaging of tomcat allow local users that win a race during package installation to escalate to root

NVD

Vulnerability Analysis

CVE-2024-22029 can be exploited with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Weakness Type

Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. When a resource is given a permissions setting that provides access to a wider range of actors than required, it could lead to the exposure of sensitive information, or the modification of that resource by unintended parties. This is especially dangerous when the resource is related to program configuration, execution or sensitive user data.


Products Associated with CVE-2024-22029

Want to know whenever a new CVE is published for Apache Tomcat? stack.watch will email you.

Apache Tomcat
 

Affected Versions

Container suse/manager/5.0/x86_64/server:5.0.0-beta1.2.122: SUSE Enterprise Storage 7.1: SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS: SUSE Linux Enterprise High Performance Computing 15 SP5: SUSE Linux Enterprise Module for Web and Scripting 15 SP5: SUSE Linux Enterprise Server 15 SP5: SUSE Linux Enterprise Server for SAP Applications 15 SP5: SUSE Linux Enterprise High Performance Computing 15 SP6: SUSE Linux Enterprise Module for Web and Scripting 15 SP6: SUSE Linux Enterprise Server 15 SP6: SUSE Linux Enterprise Server for SAP Applications 15 SP6: SUSE Linux Enterprise Server 15 SP2-LTSS: SUSE Linux Enterprise Server 15 SP3-LTSS: SUSE Linux Enterprise Server 15 SP4-LTSS: SUSE Linux Enterprise Server for SAP Applications 15 SP2: SUSE Linux Enterprise Server for SAP Applications 15 SP3: SUSE Linux Enterprise Server for SAP Applications 15 SP4: SUSE Manager Server 4.3: openSUSE Leap 15.5: openSUSE Tumbleweed:

Exploit Probability

EPSS
0.01%
Percentile
2.52%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.