ByteOS Network

NVD Vulnerability Details :

CVE-2024-29199

Analyzed

Source-security-advisories@github.com

Published At-26 Mar, 2024 | 03:15

Updated At-26 Aug, 2025 | 17:18

Nautobot is a Network Source of Truth and Network Automation Platform. A number of Nautobot URL endpoints were found to be improperly accessible to unauthenticated (anonymous) users. These endpoints will not disclose any Nautobot data to an unauthenticated user unless the Nautobot configuration variable EXEMPT_VIEW_PERMISSIONS is changed from its default value (an empty list) to permit access to specific data by unauthenticated users. This vulnerability is fixed in 1.6.16 and 2.1.9.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	3.7	LOW	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Primary	3.1	5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CPE Matches

networktocode>>nautobot>>Versions before 1.6.16(exclusive)

cpe:2.3:a:networktocode:nautobot:*:*:*:*:*:*:*:*

networktocode>>nautobot>>Versions from 2.0.0(inclusive) to 2.1.9(exclusive)

cpe:2.3:a:networktocode:nautobot:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-200	Secondary	security-advisories@github.com

References

Hyperlink	Source	Resource
https://github.com/nautobot/nautobot/commit/2fd95c365f8477b26e06d60b999ddd36882d5750	security-advisories@github.com	Patch
https://github.com/nautobot/nautobot/commit/dd623e6c3307f48b6357fcc91925bcad5192abfb	security-advisories@github.com	Patch
https://github.com/nautobot/nautobot/pull/5464	security-advisories@github.com	Patch
https://github.com/nautobot/nautobot/pull/5465	security-advisories@github.com	Patch
https://github.com/nautobot/nautobot/releases/tag/v1.6.16	security-advisories@github.com	Release Notes
https://github.com/nautobot/nautobot/releases/tag/v2.1.9	security-advisories@github.com	Release Notes
https://github.com/nautobot/nautobot/security/advisories/GHSA-m732-wvh2-7cq4	security-advisories@github.com	Third Party Advisory
https://github.com/nautobot/nautobot/commit/2fd95c365f8477b26e06d60b999ddd36882d5750	af854a3a-2127-422b-91ae-364da2661108	Patch
https://github.com/nautobot/nautobot/commit/dd623e6c3307f48b6357fcc91925bcad5192abfb	af854a3a-2127-422b-91ae-364da2661108	Patch
https://github.com/nautobot/nautobot/pull/5464	af854a3a-2127-422b-91ae-364da2661108	Patch
https://github.com/nautobot/nautobot/pull/5465	af854a3a-2127-422b-91ae-364da2661108	Patch
https://github.com/nautobot/nautobot/releases/tag/v1.6.16	af854a3a-2127-422b-91ae-364da2661108	Release Notes
https://github.com/nautobot/nautobot/releases/tag/v2.1.9	af854a3a-2127-422b-91ae-364da2661108	Release Notes
https://github.com/nautobot/nautobot/security/advisories/GHSA-m732-wvh2-7cq4	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History