CVE-2024-22114

What it actually does

A low-privileged user without host permissions can retrieve host counts and related statistics via the System Information Widget on the Global View Dashboard.

Why it matters to the business

Attackers gain unauthorized visibility into infrastructure size and statistics, which can support reconnaissance for subsequent attacks; the issue affects a widely used library package with many downstream dependents.

How an attack unfolds

An authenticated low-privilege user navigates to the dashboard, loads the System Information Widget, and directly observes host counts and statistics that should be restricted.

How to fix it

Upgrade libvorbis, libvorbis-devel, and libvorbis-devel-docs on AlmaLinux 8 to version 1:1.3.6-2.el8 or later.

How to confirm the fix worked

Confirm the installed package versions match or exceed the fixed releases and verify that the widget no longer exposes host statistics to unauthorized users.

Typical attack path

1. Obtain low-privilege authenticated access to the application
2. Navigate to Global View Dashboard
3. View or interact with System Information Widget to retrieve host statistics

How to detect it

Review application access logs for low-privilege users querying dashboard widgets or statistics endpoints; look for repeated access to global view resources without corresponding host permissions.

What your security team should do

• Apply the listed package updates immediately due to the 793 days since publication
• Review dashboard widget permissions and restrict statistics visibility to authorized roles
• Monitor EPSS and exploit maturity trends for any increase in activity