Fence Agents Remediation Security Update Advisory (CVE-2024-5651)
Overview
An update has been released to address vulnerabilities in Fence Agents Remediation. Users of the affected versions are advised to update to the latest version.
Affected Products
CVE-2024-5651
- Fence Agents Remediation 0.4 previous version
Resolved Vulnerabilities
Vulnerability in -ssh-path/–telnet-path arguments that could allow remote code execution (RCE) by providing arbitrary commands to be executed (CVE-2024-5651)
Vulnerability Patches
The following product-specific Vulnerability Patches have been made available in the latest update. If you are using an affected version, Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.
CVE-2024-5651
- Fence Agents Remediation version: 0.4
References
[1] CVE-2024-5651 Detail
https://nvd.nist.gov/vuln/detail/CVE-2024-5651
[2] Bug 2290540 (CVE-2024-5651) – CVE-2024-5651 fence-agent: Fence Agent Command Line Options Leads to Remote Code Execution