PT-2024-17283 · Plextrac · Plextrac

Ianis Bernard · Published 2024-12-13 · Updated 2024-12-13 · CVE-2024-11836

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/U:Red

Name of the Vulnerable Software and Affected Versions PlexTrac versions 1.61.3 through 2.8.1

Description The issue is a Server-Side Request Forgery (SSRF) vulnerability in PlexTrac, allowing requests to internal system resources.

Recommendations For PlexTrac versions 1.61.3 through 2.8.1, update to a version after 2.8.1 to resolve the issue. As a temporary workaround, consider restricting access to internal system resources until a patch is available.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2024-11836

Affected Products

Plextrac

References · 9

• https://osv.dev/vulnerability/CVE-2024-11836 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-11836 · Security Note
• https://t.me/cvedetector/12835 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1867477676270723178 · Twitter Post
• https://docs.plextrac.com/plextrac-documentation/master/security-advisories#release-2.11.0 · Note
• https://twitter.com/CVEnew/status/1867537615097913432 · Twitter Post
• https://twitter.com/CveFindCom/status/1867450000113869201 · Twitter Post
• https://t.me/cvenotify/104142 · Telegram Post
• https://t.me/latest_high_impact_cve/1645 · Telegram Post