PT-2022-16915 · Fleetdm+1 · Fleet+1

J5Oh + 1 · Published 2022-04-18 · Updated 2024-12-25 · CVE-2022-24841

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions fleetdm/fleet versions prior to 4.13

Description The issue is an authorization bypass problem that affects all versions of fleetdm/fleet that use the teams feature. Fleet instances without teams or with teams but without restricted team accounts are not affected. In affected versions, a team admin can erroneously add themselves as admin, maintainer, or observer on other teams.

Recommendations For versions prior to 4.13, upgrade to version 4.13 to resolve the issue. As a temporary workaround, consider restricting team admin privileges to prevent unauthorized access to other teams. Avoid using the teams feature with restricted team accounts until the issue is resolved.

Exploit

Fix

Improper Access Control

Incorrect Authorization

Weakness Enumeration

CWE-284

CWE-863

Related Identifiers

ALT-PU-2024-17045

CVE-2022-24841

GHSA-PR2G-J78H-84CR

Affected Products

Alt Linux

Fleet

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24841.json · Exploit
• https://github.com/fleetdm/fleet/commit/da171d3b8d149c30b8307723cbe6b6e8847cb30c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-24841 · Security Note
• https://osv.dev/vulnerability/CVE-2022-24841 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-24841 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-24841 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-24841 · Security Note
• https://github.com/fleetdm/fleet/security/advisories/GHSA-pr2g-j78h-84cr · Note
• https://cwe.mitre.org/data/definitions/863.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24841 · Note
• https://t.me/cvenotify/29128 · Telegram Post
• https://t.me/cibsecurity/41083 · Telegram Post