CVE-2024-31947

MEDIO 6.5CVE-2024-31947 · Published 12/07/2024 · updated 17/06/2026

In breve

CVE-2024-31947 è una vulnerabilità MEDIO (CVSS 6.5) che riguarda storage concentrator (stonefly).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.73%, superiore al 54.4% delle vulnerabilità.
Correzione: aggiornare a 8.0.4.26 o successiva.

Package	Affected versions	Patched versions
storage concentrator stonefly	`< 8.0.4.26`	`8.0.4.26`

Description

StoneFly Storage Concentrator (SC and SCVM) before 8.0.4.26 allows Directory Traversal by authenticated users. Using a crafted path parameter with the Online Help facility can expose sensitive system information.

References

stonefly.com · Product
stonefly.com/security-advisories/cve-2024-31947 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free