High severity7.5NVD Advisory· Published Mar 27, 2024· Updated Apr 15, 2026
CVE-2024-2097
CVE-2024-2097
Description
An authenticated malicious client can send a special LINQ query to execute arbitrary code remotely (RCE) on the SCM server from List control, and execute the arbitrary code on the same system where SCMArchivedEventViewerTool is installed in the case of SCM Tools.
Affected products
8- osv-coords7 versionspkg:rpm/almalinux/mysqlpkg:rpm/almalinux/mysql-commonpkg:rpm/almalinux/mysql-develpkg:rpm/almalinux/mysql-errmsgpkg:rpm/almalinux/mysql-libspkg:rpm/almalinux/mysql-serverpkg:rpm/almalinux/mysql-test
< 8.0.36-1.el9_3+ 6 more
- (no CPE)range: < 8.0.36-1.el9_3
- (no CPE)range: < 8.0.36-1.el9_3
- (no CPE)range: < 8.0.36-1.el9_3
- (no CPE)range: < 8.0.36-1.el9_3
- (no CPE)range: < 8.0.36-1.el9_3
- (no CPE)range: < 8.0.36-1.el9_3
- (no CPE)range: < 8.0.36-1.el9_3
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.