What is the CVSS score of CVE-2024-38822?

CVE-2024-38822 has a CVSS 3.1 base score of 2.7 (Low). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N. EPSS exploitation probability: 0.1%.

Which versions of Ubuntu are affected by CVE-2024-38822?

CVE-2024-38822 is a low-severity vulnerability involving authentication failure (CVSS 2.7).. A patch is available.

How to fix or mitigate CVE-2024-38822?

During next maintenance window: Apply vendor patches when convenient. Monitor vendor channels for updates.

Ubuntu CVE-2024-38822

EUVD-2024-54685 LOW

Improper Authentication (CWE-287)

2025-06-13 security@vmware.com

Authentication Bypass Debian Ubuntu

2.7

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

2.7 LOW

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Ubuntu

MEDIUM

qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 14, 2026 - 21:34 euvd

EUVD-2024-54685

Analysis Generated

Mar 14, 2026 - 21:34 vuln.today

CVE Published

Jun 13, 2025 - 07:15 nvd

LOW 2.7

DescriptionCVE.org

Multiple methods in the salt master skip minion token validation. Therefore a misbehaving minion can impersonate another minion.

Analysis

Multiple methods in the salt master skip minion token validation. Therefore a misbehaving minion can impersonate another minion.

Technical ContextAI

An authentication bypass vulnerability allows attackers to circumvent login mechanisms and gain unauthorized access without valid credentials. This vulnerability is classified as Improper Authentication (CWE-287).

RemediationAI

Implement robust authentication mechanisms. Use multi-factor authentication. Review authentication logic for bypass conditions. Remove default credentials.