Security Advisory

CVE-2024-29189

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-03-26 02:50:34
Last updated 2024-08-05 20:27:31
Assigner GitHub_M
State PUBLISHED

Description

PyAnsys Geometry is a Python client library for the Ansys Geometry service and other CAD Ansys products. On file src/ansys/geometry/core/connection/product_instance.py, upon calling this method _start_program directly, users could exploit its usage to perform malicious operations on the current machine where the script is ran. This vulnerability is fixed in 0.3.3 and 0.4.12.