CVE-2024-22047

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2024-22047", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "PUBLISHED", "assignerShortName": "VulnCheck", "dateReserved": "2024-01-04T18:44:53.107Z", "datePublished": "2024-01-04T20:32:02.771Z", "dateUpdated": "2026-11-08T13:59:53.552Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-11-08T13:59:53.552Z"}, "title": "Audited Log Integrity Errors Due to Race Condition", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>A race condition exists in Audited 4.0.0 before 5.3.3 that can result in an authenticated user to cause audit log entries to be attributed to another user.</p>"}], "value": "A race condition exists in Audited 4.0.0 before 5.3.3 that can result in an authenticated user to cause audit log entries to be attributed to another user."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-362", "description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", "lang": "en", "type": "CWE"}]}], "affected": [{"collectionURL": "https://rubygems.org", "defaultStatus": "unaffected", "packageURL": "pkg:gem/audited", "packageName": "audited", "versions": [{"lessThan": "5.3.3", "status": "affected", "version": "4.0.0", "versionType": "semver"}]}], "cpeApplicability": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:collectiveidea:audited:*:*:*:*:*:*:*:*", "versionEndExcluding": "5.3.3", "versionStartIncluding": "4.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "references": [{"tags": ["vendor-advisory"], "url": "https://github.com/collectiveidea/audited/security/advisories/GHSA-hjp3-5g2q-7jww", "name": "GitHub Security Advisory (GHSA-hjp3-5g2q-7jww)"}, {"tags": ["issue-tracking"], "url": "https://github.com/collectiveidea/audited/issues/601"}, {"tags": ["issue-tracking", "patch"], "url": "https://github.com/collectiveidea/audited/pull/669"}, {"tags": ["issue-tracking", "patch"], "url": "https://github.com/collectiveidea/audited/pull/671"}, {"tags": ["vendor-advisory"], "url": "https://github.com/advisories/GHSA-hjp3-5g2q-7jww", "name": "GitHub Security Advisory (GHSA-hjp3-5g2q-7jww)"}, {"tags": ["third-party-advisory"], "url": "https://vulncheck.com/advisories/vc-advisory-GHSA-hjp3-5g2q-7jww"}], "source": {"discovery": "INTERNAL"}, "x_generator": {"engine": "vulncheck"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T22:35:34.846Z"}, "title": "CVE Program Container", "references": [{"tags": ["vendor-advisory", "x_transferred"], "url": "https://github.com/collectiveidea/audited/security/advisories/GHSA-hjp3-5g2q-7jww"}, {"tags": ["issue-tracking", "x_transferred"], "url": "https://github.com/collectiveidea/audited/issues/601"}, {"tags": ["related", "x_transferred"], "url": "https://github.com/collectiveidea/audited/pull/669"}, {"tags": ["related", "x_transferred"], "url": "https://github.com/collectiveidea/audited/pull/671"}, {"tags": ["third-party-advisory", "x_transferred"], "url": "https://github.com/advisories/GHSA-hjp3-5g2q-7jww"}, {"tags": ["third-party-advisory", "x_transferred"], "url": "https://vulncheck.com/advisories/vc-advisory-GHSA-hjp3-5g2q-7jww"}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-05-08T15:57:21.824787Z", "id": "CVE-2024-22047", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-03T14:41:59.058Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://github.com/collectiveidea/audited/security/advisories/GHSA-hjp3-5g2q-7jww", "tags": ["vendor-advisory", "x_transferred"]}, {"url": "https://github.com/collectiveidea/audited/issues/601", "tags": ["issue-tracking", "x_transferred"]}, {"url": "https://github.com/collectiveidea/audited/pull/669", "tags": ["related", "x_transferred"]}, {"url": "https://github.com/collectiveidea/audited/pull/671", "tags": ["related", "x_transferred"]}, {"url": "https://github.com/advisories/GHSA-hjp3-5g2q-7jww", "tags": ["third-party-advisory", "x_transferred"]}, {"url": "https://vulncheck.com/advisories/vc-advisory-GHSA-hjp3-5g2q-7jww", "tags": ["third-party-advisory", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T22:35:34.846Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-22047", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-05-08T15:57:21.824787Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-08T15:57:23.743Z"}}], "cna": {"title": "Audited Log Integrity Errors Due to Race Condition", "source": {"discovery": "INTERNAL"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.1, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"versions": [{"status": "affected", "version": "4.0.0", "lessThan": "5.3.3", "versionType": "semver"}], "packageURL": "pkg:gem/audited", "packageName": "audited", "collectionURL": "https://rubygems.org", "defaultStatus": "unaffected"}], "references": [{"url": "https://github.com/collectiveidea/audited/security/advisories/GHSA-hjp3-5g2q-7jww", "name": "GitHub Security Advisory (GHSA-hjp3-5g2q-7jww)", "tags": ["vendor-advisory"]}, {"url": "https://github.com/collectiveidea/audited/issues/601", "tags": ["issue-tracking"]}, {"url": "https://github.com/collectiveidea/audited/pull/669", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/collectiveidea/audited/pull/671", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/advisories/GHSA-hjp3-5g2q-7jww", "name": "GitHub Security Advisory (GHSA-hjp3-5g2q-7jww)", "tags": ["vendor-advisory"]}, {"url": "https://vulncheck.com/advisories/vc-advisory-GHSA-hjp3-5g2q-7jww", "tags": ["third-party-advisory"]}], "x_generator": {"engine": "vulncheck"}, "descriptions": [{"lang": "en", "value": "A race condition exists in Audited 4.0.0 before 5.3.3 that can result in an authenticated user to cause audit log entries to be attributed to another user.", "supportingMedia": [{"type": "text/html", "value": "<p>A race condition exists in Audited 4.0.0 before 5.3.3 that can result in an authenticated user to cause audit log entries to be attributed to another user.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-362", "description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:collectiveidea:audited:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.3.3", "versionStartIncluding": "4.0.0"}], "operator": "OR"}], "operator": "OR"}], "providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-11-08T13:59:53.552Z"}}}, "cveMetadata": {"cveId": "CVE-2024-22047", "state": "PUBLISHED", "dateUpdated": "2026-11-08T13:59:53.552Z", "dateReserved": "2024-01-04T18:44:53.107Z", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "datePublished": "2024-01-04T20:32:02.771Z", "assignerShortName": "VulnCheck"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"collectionURL": "https://rubygems.org", "defaultStatus": "unaffected", "packageName": "audited", "packageURL": "pkg:gem/audited", "versions": [{"lessThan": "5.3.3", "status": "affected", "version": "4.0.0", "versionType": "semver"}]}], "source": "disclosure@vulncheck.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:collectiveidea:audited:*:*:*:*:*:*:*:*", "matchCriteriaId": "6F9F98EC-034A-4BD6-85FF-038B75CC82BF", "versionEndExcluding": "5.3.3", "versionStartIncluding": "4.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A race condition exists in Audited 4.0.0 before 5.3.3 that can result in an authenticated user to cause audit log entries to be attributed to another user."}, {"lang": "es", "value": "Existe una condici\u00f3n de ejecuci\u00f3n en Audited 4.0.0 a 5.3.3 que puede provocar que un usuario autenticado haga que las entradas del registro de auditor\u00eda se atribuyan a otro usuario."}], "id": "CVE-2024-22047", "lastModified": "2026-10-29T21:17:02.613", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 1.4, "source": "disclosure@vulncheck.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.1, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-22047", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-05-08T15:57:21.824787Z", "version": "2.0.3"}}]}, "published": "2024-01-04T21:15:09.720", "references": [{"source": "disclosure@vulncheck.com", "tags": ["Third Party Advisory"], "url": "https://github.com/advisories/GHSA-hjp3-5g2q-7jww"}, {"source": "disclosure@vulncheck.com", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://github.com/collectiveidea/audited/issues/601"}, {"source": "disclosure@vulncheck.com", "tags": ["Patch"], "url": "https://github.com/collectiveidea/audited/pull/669"}, {"source": "disclosure@vulncheck.com", "tags": ["Patch"], "url": "https://github.com/collectiveidea/audited/pull/671"}, {"source": "disclosure@vulncheck.com", "tags": ["Vendor Advisory"], "url": "https://github.com/collectiveidea/audited/security/advisories/GHSA-hjp3-5g2q-7jww"}, {"source": "disclosure@vulncheck.com", "tags": ["Third Party Advisory"], "url": "https://vulncheck.com/advisories/vc-advisory-GHSA-hjp3-5g2q-7jww"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://github.com/advisories/GHSA-hjp3-5g2q-7jww"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://github.com/collectiveidea/audited/issues/601"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://github.com/collectiveidea/audited/pull/669"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://github.com/collectiveidea/audited/pull/671"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://github.com/collectiveidea/audited/security/advisories/GHSA-hjp3-5g2q-7jww"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://vulncheck.com/advisories/vc-advisory-GHSA-hjp3-5g2q-7jww"}], "sourceIdentifier": "disclosure@vulncheck.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-362"}], "source": "disclosure@vulncheck.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-362"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2024:2010", "cpe": "cpe:/a:redhat:satellite:6.15::el8", "package": "rubygem-audited-0:5.4.2-1.el8sat", "product_name": "Red Hat Satellite 6.15 for RHEL 8", "release_date": "2024-04-23T00:00:00Z"}], "bugzilla": {"description": "audited: race condition can lead to audit logs being incorrectly attributed to the wrong user", "id": "2256891", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256891"}, "csaw": false, "cvss3": {"cvss3_base_score": "3.1", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "status": "verified"}, "cwe": "CWE-362", "details": ["A race condition exists in Audited 4.0.0 to 5.3.3 that can result in an authenticated user to cause audit log entries to be attributed to another user.", "A race condition flaw was found in Audited. This issue may allow an authenticated user to attribute audit log entries to another user."], "name": "CVE-2024-22047", "public_date": "2024-01-04T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-22047\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-22047"], "threat_severity": "Low"}

{}