Security Advisory

CVE-2024-24897

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-03-25 07:10:48
Last updated 2024-08-12 18:46:09
Assigner openEuler
State PUBLISHED

Description

Improper Neutralization of Special Elements used in a Command (Command Injection) vulnerability in openEuler A-Tune-Collector on Linux allows Command Injection. This vulnerability is associated with program files https://gitee.Com/openeuler/A-Tune-Collector/blob/master/atune_collector/plugin/monitor/process/sched.Py. This issue affects A-Tune-Collector: from 1.1.0-3 through 1.3.0.