CVE-2024-8260
CVE Details
Visit the official vulnerability details page for CVE-2024-8260 to learn more.
Initial Publication
10/25/2024
Last Update
12/11/2024
Third Party Dependency
github.com/open-policy-agent/opa
NIST CVE Summary
A SMB force-authentication vulnerability exists in all versions of OPA for Windows prior to v0.68.0. The vulnerability exists because of improper input validation, allowing a user to pass an arbitrary SMB share instead of a Rego file as an argument to OPA CLI or to one of the OPA Go library’s functions.
CVE Severity
Our Official Summary
This vulnerability is a false positive. Although this is reported by the scanning tools on some of the components, further checks indicate the symbol/function with the vulnerability while present is not being used.
Status
Ongoing
Affected Products & Versions
This CVE is non-impacting as the impacting symbol and/or function is not used in the product
Revision History
No revisions available.