high7.8
CVE-2024-39755
A privilege escalation vulnerability exists in the node update functionality of Veertu Anka Build 1.42.0.
Impact
A privilege escalation vulnerability exists in the node update functionality of Veertu Anka Build 1.42.0. A specially crafted PKG file can lead to execute priviledged operation. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Veertu | Anka Build Cloud | Version 1.42.0 |