Read the docs
TI-2024-27460 Aliases CVE-2024-41108

FOG Sensitive Information Disclosure

Priority HIGH 72CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure, Security bypass
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-200 and CWE-862.

Summary

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. The hostinfo page has missing/improper access control since only the host's mac address is required to obtain the configuration information. This data can only be retrieved if a task is pending on that host. Otherwise, an error message containing "Invalid tasking!" will be returned. The domainpassword in the hostinfo dump is hidden even to authenticated users, as it is displayed as a row of asterisks when navigating to the host's Active Directory settings. This vulnerability is fixed in 1.5.10.41.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00552 46th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed fogproject (FOGProject): 1.5.10.41

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
FOGProjectfogprojectbefore 1.5.10.411.5.10.41Patch availableCNA
  • fogproject VendorFOGProject Affected before 1.5.10.41 Fixed in 1.5.10.41 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:fogproject:fogproject:*:*:*:*:*:*:*:*1.5.10 to before 1.5.10.41VulnerableFOGProject
  • cpe:2.3:a:fogproject:fogproject:*:*:*:*:*:*:*:* Versions 1.5.10 to before 1.5.10.41 Vulnerable ·FOGProject

Remediation

  • Fix · CNA fogproject (FOGProject) Fixed in 1.5.10.41

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-41108

References

Exploit 1

Other 2

  • TI-2025-36201 FOG's authentication bypass leads to full SQL DB dump CVSS 4.0CRITICAL 9.9
  • TI-2024-26807 FOG has a command injection in /fog/management/export.php?filename= CVSS 3.1CRITICAL 9.8
  • TI-2024-28335 FOG leaks sensitive information (AD domain, username and password) CVSS 3.1CRITICAL 9.3
  • TI-2026-35192 Missing authorization in fogproject CVSS 3.1HIGH 8.2
  • TI-2026-35191 FOGProject has stored XSS via unescaped option label in selectForm() accessible from unauthenticated inventory endpoint CVSS 3.1HIGH 8.7
  • TI-2024-27056 FOG Authenticated File Upload RCE CVSS 3.1HIGH 8.8
See all 17 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences