CVE-2024-40629 is a critical arbitrary file write vulnerability affecting JumpServer, an open-source Privileged Access Management (PAM) tool. An attacker can exploit an Ansible playbook to write arbitrary files, leading to remote code execution (RCE) within the Celery container, which runs as root and has database access. This allows for complete compromise, including data theft, privilege escalation, and database manipulation. Rated 9.8 CRITICAL (CVSSv3.1), it requires no user interaction or authentication, making it easily exploitable over the network. While no public exploit code or active exploitation has been confirmed, the vulnerability has garnered community discussion, and patches are available in JumpServer versions 3.10.12 and 4.0.0.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 3.0.0, < 3.10.12CPE matchmatch criteria | cpe:2.3:a:fit2cloud:jumpserver:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.