Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2024-22047

15
FAUCET Score

CVE-2024-22047 describes a race condition in Audited versions 4.0.0 through 5.3.3, allowing an authenticated user to incorrectly attribute audit log entries to another user. This vulnerability has a low CVSS score of 3.1, indicating a low impact on integrity and requiring high attack complexity over a network. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
>= 4.0.0, < 5.3.3CPE matchmatch criteria
cpe:2.3:a:collectiveidea:audited:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

3.1LOW

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
Exploitability Score
1.6
Impact Score
1.4
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.49%
Probability of exploitation in next 30 days
EPSS Percentile
39.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
This CVE's current EPSS score of 0.0049 is in the 12th percentile among its peer group of 1,637 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (3)

github_advisorypatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Satellite 6.15 for RHEL 8Fixed in: rubygem-audited-0:5.4.2-1.el8sat
View patch
rubygemspatch availablevia ghsa
Product: auditedFixed in: 5.3.3

Vendor Advisories (2)

redhatCVE-2024-22047Low

audited: race condition can lead to audit logs being incorrectly attributed to the wrong user

Jan 4, 2024
rubygemsGHSA-hjp3-5g2q-7jwwlow

Race Condition leading to logging errors

May 1, 2023

References

github.com / advisories/GHSA-hjp3-5g2q-7jww
Third Party Advisory
github.com / collectiveidea/audited/issues/601
Issue TrackingPatchVendor Advisory
github.com / collectiveidea/audited/pull/669
Patch
github.com / collectiveidea/audited/pull/671
Patch
github.com / collectiveidea/audited/security/advisories/GHSA-hjp3-5g2q-7jww
Vendor Advisory
vulncheck.com / advisories/vc-advisory-GHSA-hjp3-5g2q-7jww
Third Party Advisory