Is CVE-2024-6840 in the CISA KEV catalog?

No. CVE-2024-6840 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2024-6840?

CVE-2024-6840 has a CVSS v3 base score of 6.6 (MEDIUM).

What is the EPSS score for CVE-2024-6840?

CVE-2024-6840 has an EPSS score of 0.43% (34th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2024-6840?

Upgrade automation-controller on rocky 8 to 0:4.5.10-1.el8ap or later. Fixes are available for 76 affected products.

CVE & CISA-KEV Catalog

CVE-2024-6840

MEDIUM

6.6

CVSS v3

NVD

Description

An improper authorization flaw exists in the Ansible Automation Controller. This flaw allows an attacker using the k8S API server to send an HTTP request with a service account token mounted via `automountServiceAccountToken: true`, resulting in privilege escalation to a service account.

CWE-285

How to fix

Remediation Available

automation-controllerRocky

Fixed in:0:4.5.10-1.el8apRHSA-2024:6428

Fixed in:0:4.5.10-1.el9apRHSA-2024:6428

automation-controllerRed Hat / RHEL

Fixed in:0:4.5.10-1.el8apRHSA-2024:6428

Fixed in:0:4.5.10-1.el9apRHSA-2024:6428

automation-controller-cliRocky

Fixed in:0:4.5.10-1.el8apRHSA-2024:6428

Fixed in:0:4.5.10-1.el9apRHSA-2024:6428

automation-controller-cliRed Hat / RHEL

Fixed in:0:4.5.10-1.el8apRHSA-2024:6428

Fixed in:0:4.5.10-1.el9apRHSA-2024:6428

automation-controller-serverRocky

Fixed in:0:4.5.10-1.el8apRHSA-2024:6428

Fixed in:0:4.5.10-1.el9apRHSA-2024:6428

automation-controller-serverRed Hat / RHEL

Fixed in:0:4.5.10-1.el8apRHSA-2024:6428

Fixed in:0:4.5.10-1.el9apRHSA-2024:6428

automation-controller-uiRocky

Fixed in:0:4.5.10-1.el8apRHSA-2024:6428

Fixed in:0:4.5.10-1.el9apRHSA-2024:6428

automation-controller-uiRed Hat / RHEL

Fixed in:0:4.5.10-1.el8apRHSA-2024:6428

Fixed in:0:4.5.10-1.el9apRHSA-2024:6428

automation-controller-venv-towerRed Hat / RHEL

Fixed in:0:4.5.10-1.el8apRHSA-2024:6428

Fixed in:0:4.5.10-1.el9apRHSA-2024:6428

automation-controller-venv-towerRocky

Fixed in:0:4.5.10-1.el8apRHSA-2024:6428

Fixed in:0:4.5.10-1.el9apRHSA-2024:6428

python-djangoRocky

Fixed in:0:4.2.15-1.el9apRHSA-2024:6428

python-djangoRed Hat / RHEL

Fixed in:0:4.2.15-1.el9apRHSA-2024:6428

python-grpcioRed Hat / RHEL

Fixed in:0:1.58.3-1.el9apRHSA-2024:6428

python-grpcioRocky

Fixed in:0:1.58.3-1.el9apRHSA-2024:6428

python-grpcio-debugsourceRocky

Fixed in:0:1.58.3-1.el9apRHSA-2024:6428

python-grpcio-debugsourceRed Hat / RHEL

Fixed in:0:1.58.3-1.el9apRHSA-2024:6428

python-gunicornRocky

Fixed in:0:22.0.0-2.el9apRHSA-2024:6428

python-gunicornRed Hat / RHEL

Fixed in:0:22.0.0-2.el9apRHSA-2024:6428

python-jmespathRed Hat / RHEL

Fixed in:0:0.10.0-5.el9apRHSA-2024:6428

python-jmespathRocky

Fixed in:0:0.10.0-5.el9apRHSA-2024:6428

python-pulp-ansibleRocky

Fixed in:1:0.20.8-1.el9apRHSA-2024:6428

python-pulp-ansibleRed Hat / RHEL

Fixed in:1:0.20.8-1.el9apRHSA-2024:6428

python-pulpcoreRed Hat / RHEL

Fixed in:0:3.28.31-1.el9apRHSA-2024:6428

python-pulpcoreRocky

Fixed in:0:3.28.31-1.el9apRHSA-2024:6428

python-zippRed Hat / RHEL

Fixed in:0:3.19.2-1.el9apRHSA-2024:6428

python-zippRocky

Fixed in:0:3.19.2-1.el9apRHSA-2024:6428

python3-djangoRocky

Fixed in:0:4.2.15-1.el9apRHSA-2024:6428

python3-djangoRed Hat / RHEL

Fixed in:0:4.2.15-1.el9apRHSA-2024:6428

python3-grpcioRed Hat / RHEL

Fixed in:0:1.58.3-1.el9apRHSA-2024:6428

python3-grpcioRocky

Fixed in:0:1.58.3-1.el9apRHSA-2024:6428

python3-grpcio-debuginfoRed Hat / RHEL

Fixed in:0:1.58.3-1.el9apRHSA-2024:6428

python3-grpcio-debuginfoRocky

Fixed in:0:1.58.3-1.el9apRHSA-2024:6428

python3-grpcio-tools-debuginfoRed Hat / RHEL

Fixed in:0:1.58.3-1.el9apRHSA-2024:6428

python3-grpcio-tools-debuginfoRocky

Fixed in:0:1.58.3-1.el9apRHSA-2024:6428

python3-gunicornRed Hat / RHEL

Fixed in:0:22.0.0-2.el9apRHSA-2024:6428

python3-gunicornRocky

Fixed in:0:22.0.0-2.el9apRHSA-2024:6428

python3-jmespathRocky

Fixed in:0:0.10.0-5.el9apRHSA-2024:6428

python3-jmespathRed Hat / RHEL

Fixed in:0:0.10.0-5.el9apRHSA-2024:6428

python3-pulp-ansibleRed Hat / RHEL

Fixed in:1:0.20.8-1.el9apRHSA-2024:6428

python3-pulp-ansibleRocky

Fixed in:1:0.20.8-1.el9apRHSA-2024:6428

python3-pulpcoreRocky

Fixed in:0:3.28.31-1.el9apRHSA-2024:6428

python3-pulpcoreRed Hat / RHEL

Fixed in:0:3.28.31-1.el9apRHSA-2024:6428

python3-zippRed Hat / RHEL

Fixed in:0:3.19.2-1.el9apRHSA-2024:6428

python3-zippRocky

Fixed in:0:3.19.2-1.el9apRHSA-2024:6428

python39-djangoRed Hat / RHEL

Fixed in:0:4.2.15-1.el8apRHSA-2024:6428

python39-djangoRocky

Fixed in:0:4.2.15-1.el8apRHSA-2024:6428

python39-grpcioRocky

Fixed in:0:1.58.3-1.el8apRHSA-2024:6428

python39-grpcioRed Hat / RHEL

Fixed in:0:1.58.3-1.el8apRHSA-2024:6428

python39-grpcio-debuginfoRocky

Fixed in:0:1.58.3-1.el8apRHSA-2024:6428

python39-grpcio-debuginfoRed Hat / RHEL

Fixed in:0:1.58.3-1.el8apRHSA-2024:6428

python39-grpcio-tools-debuginfoRocky

Fixed in:0:1.58.3-1.el8apRHSA-2024:6428

python39-grpcio-tools-debuginfoRed Hat / RHEL

Fixed in:0:1.58.3-1.el8apRHSA-2024:6428

python39-gunicornRed Hat / RHEL

Fixed in:0:22.0.0-2.el8apRHSA-2024:6428

python39-gunicornRocky

Fixed in:0:22.0.0-2.el8apRHSA-2024:6428

python39-jmespathRed Hat / RHEL

Fixed in:0:0.10.0-5.el8apRHSA-2024:6428

python39-jmespathRocky

Fixed in:0:0.10.0-5.el8apRHSA-2024:6428

python39-pulp-ansibleRocky

Fixed in:1:0.20.8-1.el8apRHSA-2024:6428

python39-pulp-ansibleRed Hat / RHEL

Fixed in:1:0.20.8-1.el8apRHSA-2024:6428

python39-pulpcoreRocky

Fixed in:0:3.28.31-1.el8apRHSA-2024:6428

python39-pulpcoreRed Hat / RHEL

Fixed in:0:3.28.31-1.el8apRHSA-2024:6428

python39-zippRocky

Fixed in:0:3.19.2-1.el8apRHSA-2024:6428

python39-zippRed Hat / RHEL

Fixed in:0:3.19.2-1.el8apRHSA-2024:6428

python3x-djangoRocky

Fixed in:0:4.2.15-1.el8apRHSA-2024:6428

python3x-djangoRed Hat / RHEL

Fixed in:0:4.2.15-1.el8apRHSA-2024:6428

python3x-grpcioRocky

Fixed in:0:1.58.3-1.el8apRHSA-2024:6428

python3x-grpcioRed Hat / RHEL

Fixed in:0:1.58.3-1.el8apRHSA-2024:6428

python3x-grpcio-debugsourceRed Hat / RHEL

Fixed in:0:1.58.3-1.el8apRHSA-2024:6428

python3x-grpcio-debugsourceRocky

Fixed in:0:1.58.3-1.el8apRHSA-2024:6428

python3x-gunicornRed Hat / RHEL

Fixed in:0:22.0.0-2.el8apRHSA-2024:6428

python3x-gunicornRocky

Fixed in:0:22.0.0-2.el8apRHSA-2024:6428

python3x-jmespathRed Hat / RHEL

Fixed in:0:0.10.0-5.el8apRHSA-2024:6428

python3x-jmespathRocky

Fixed in:0:0.10.0-5.el8apRHSA-2024:6428

python3x-pulp-ansibleRocky

Fixed in:1:0.20.8-1.el8apRHSA-2024:6428

python3x-pulp-ansibleRed Hat / RHEL

Fixed in:1:0.20.8-1.el8apRHSA-2024:6428

python3x-pulpcoreRed Hat / RHEL

Fixed in:0:3.28.31-1.el8apRHSA-2024:6428

python3x-pulpcoreRocky

Fixed in:0:3.28.31-1.el8apRHSA-2024:6428

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork

Attack ComplexityHigh

Privileges RequiredHigh

User InteractionNone

ScopeChanged

Impact

ConfidentialityHigh

IntegrityLow

AvailabilityNone

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N

Exploit Intelligence

0.43%probability of exploitation in 30 days

34thpercentile

Low risk: more likely to be exploited than 34% of all known CVEs.

References

Other references3

Related Vulnerabilities

Other CWE-285 vulnerabilities, ordered by exploit likelihood. View all

CVE	Severity	CVSS	EPSS	Exploited	Fix
CVE-2025-29927	Critical	9.1	100%	-	Fix
CVE-2021-28799	Critical	10.0	78%	KEV + Ransom	Fix
CVE-2023-32707	High	8.8	74%	-	Fix
CVE-2023-48241	High	7.5	73%	-	Fix
CVE-2023-22480	High	7.3	67%	-	Fix
CVE-2022-3229	Critical	9.8	66%	-	-

Embed a live status badge for CVE-2024-6840

Markdown

[![CVE-2024-6840](https://tridentstack.com/cve/badge/CVE-2024-6840.svg)](https://tridentstack.com/cve/CVE-2024-6840)

HTML

<a href="https://tridentstack.com/cve/CVE-2024-6840"><img src="https://tridentstack.com/cve/badge/CVE-2024-6840.svg" alt="CVE-2024-6840"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-09-12.