Veertu Anka Build Privilege Escalation via Agent Update (CVE-2024-39755)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability ID: TALOS-2024-2060 2. Vulnerability Name: Veertu Anka Build node agent update privilege escalation vulnerability 3. Release Date: October 3, 2024 4. CVE ID: CVE-2024-39755 5. Vulnerability Description: A privilege escalation vulnerability exists in Veertu Anka Build 1.42.0. The vulnerability occurs during the Anka node agent update process. A low-privileged user can trigger the update operation, leading to unintended privilege escalation. 6. Affected Versions: Veertu Anka Build 1.42.0 7. Product URL: https://veertu.com/anka-build/ 8. CVSSv3 Score: 7.8 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 9. CWE ID: CWE-282 - Improper Ownership Management 10. Details: - Anka Build is a software tool designed for macOS virtualization, used to test macOS or iOS applications in CI/CD environments. - Anka Build consists of three main components: controller, registry, and node. - When a node joins the controller or during a node update, a low-privileged user can exploit this vulnerability by creating a file named in the /tmp directory, which then replaces the actual Anka agent PKG file during the update process. - The vulnerability allows a low-privileged user to create a file named in the /tmp directory, which is then substituted for the actual Anka agent PKG file during node updates. 11. Fix Status: Fixed in Anka Build Cloud version 1.43.0. 12. Timeline: - 2024-08-12: Vendor disclosure - 2024-08-12: Initial vendor contact - 2024-09-30: Vendor patch release - 2024-10-03: Public release 13. Discoverer: KPC of Cisco Talos This information provides a detailed description of the vulnerability, affected versions, remediation status, and timeline.

Goal Reached Thanks to every supporter — we hit 100%!

Veertu Anka Build Privilege Escalation via Agent Update (CVE-2024-39755)