AAI Spring vulnerability CVE-2024-38819

Products

• Automation Analytics & Intelligence

Issue/Introduction

CVE-2024-38819 detected on AAI versions 24.0HF1 and earlier.

CVE-2024-38819: Path traversal vulnerability in functional web frameworks (2nd report)

CVE-2024-38819: Path traversal vulnerability in functional web frameworks (2nd report)

 

Environment

AAI 24.0 HF1 and earlier

Resolution

This has been resolved in the AAI 24.1 release, please upgrade you AAI environment to 24.1 or later.