cve/2024/CVE-2024-0394.md

CVE-2024-0394

Description

Rapid7 Minerva Armor versions below 4.5.5 suffer from a privilege escalation vulnerability whereby an authenticated attacker can elevate privileges and execute arbitrary code with SYSTEM privilege.  The vulnerability is caused by the product's implementation of OpenSSL'sOPENSSLDIR parameter where it is set to a path accessible to low-privileged users.  The vulnerability has been remediated and fixed in version 4.5.5. 

POC

Reference

No PoCs from references.

Github

• https://github.com/chnzzh/OpenSSL-CVE-lib