Skip to content
OpenAdvisories
High · 7.3 CVE-2024-35061 EUVD-2024-1752GHSA-qv6x-53jj-vw59PYSEC-2026-1113

NASA AIT-Core uses unencrypted channels to exchange data over the network

Published May 21, 2024 · Updated Aug 2, 2024 · Assigned by mitre

Description

NASA AIT-Core v2.5.2 was discovered to use unencrypted channels to exchange data over the network, allowing attackers to execute a man-in-the-middle attack. When chained with CVE-2024-35059, the CVE in subject leads to an unauthenticated, fully remote code execution.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI ait-core <= 2.5.2 — GHSA-qv6x-53jj-vw59

References