CVE-2024-22194

Exploitation

Public exploit code exists. CISA's assessment records a public proof of concept. That is not a report of exploitation in the wild.

SSVC decision

• ExploitationpocPublic proof-of-concept exploit code exists. Not a report of exploitation in the wild.
• AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
• Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.41% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 34.0% of scored records. A rank, not a probability.

NVD base score

2.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2024-01-11 02:21Z2 YR AGO

Last updated

2025-06-03 14:25Z1 YR AGO

Reserved

2024-01-08

Assigning CNA

GitHub_M

Record state

PUBLISHED

Severity

Low (CVSS 2.2)

CNA CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N

Weaknesses

• CWE-215Insertion of Sensitive Information Into Debugging CodeBase
• CWE-337Predictable Seed in Pseudo-Random Number Generator (PRNG)Variant

Data version

5.1

Document digest

179ae8b71a8cbbcdffc56c1a7f3cdc57ad121982f8e3b34c2015de6f97d7690d

• github.comhttps://github.com/Cyber-Domain-Ontology/CDO-Utility-Local-UUID/security/advisories/GHSA-rgrf-6mf5-m882x_refsource_CONFIRM
• github.comhttps://github.com/Cyber-Domain-Ontology/CDO-Utility-Local-UUID/pull/3x_refsource_MISC
• github.comhttps://github.com/Cyber-Domain-Ontology/CDO-Utility-Local-UUID/pull/4x_refsource_MISC
• github.comhttps://github.com/Cyber-Domain-Ontology/CDO-Utility-Local-UUID/commit/9e78f7cb1075728d0aafc918514f32a1392cd235x_refsource_MISC
• github.comhttps://github.com/casework/CASE-Utilities-Python/commit/00864cd12de7c50d882dd1a74915d32e939c25f9x_refsource_MISC
• github.comhttps://github.com/casework/CASE-Utilities-Python/commit/1cccae8eb3cf94b3a28f6490efa0fbf5c82ebd6bx_refsource_MISC
• github.comhttps://github.com/casework/CASE-Utilities-Python/commit/5acb929dfb599709d1c8c90d1824dd79e0fd9e10x_refsource_MISC
• github.comhttps://github.com/casework/CASE-Utilities-Python/commit/7e02d18383eabbeb9fb4ec97d81438c9980a4790x_refsource_MISC
• github.comhttps://github.com/casework/CASE-Utilities-Python/commit/80551f49241c874c7c50e14abe05c5017630dad2x_refsource_MISC
• github.comhttps://github.com/casework/CASE-Utilities-Python/commit/939775f956796d0432ecabbf62782ed7ad1007b5x_refsource_MISC
• github.comhttps://github.com/casework/CASE-Utilities-Python/commit/db428a0745dac4fdd888ced9c52f617695519f9dx_refsource_MISC
• github.comhttps://github.com/casework/CASE-Utilities-Python/commit/e4ffadc3d56fd303b8f465d727c4a58213d311a1x_refsource_MISC
• github.comhttps://github.com/casework/CASE-Utilities-Python/commit/fca7388f09feccd3b9ea88e6df9c7a43a5349452x_refsource_MISC
• github.comhttps://github.com/casework/CASE-Utilities-Python/commit/fdc32414eccfcbde6be0fd91b7f491cc0779b02d#diff-e60b9cb8fb480ed27283a030a0898be3475992d78228f4045b12ce5cbb2f0509x_refsource_MISC