Medium severity6.9OSV Advisory· Published Apr 19, 2024· Updated Apr 15, 2026
CVE-2024-32478
CVE-2024-32478
Description
Git Credential Manager (GCM) is a secure Git credential helper. Prior to 2.5.0, the Debian package does not set root ownership on installed files. This allows user 1001 on a multi-user system can replace binary and gain other users' privileges. This vulnerability is fixed in 2.5.0.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: v2.0.5-beta, v2.0.779, v2.0.785, …
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.