CVE-2024-57176
Antabot White-Jotter 0.2.2
Raw vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:LSummary
CVE-2024-57176 is a high-severity Incomplete Model of Endpoint Features (CWE-437) vulnerability in Antabot White-Jotter. Its CVSS base score is 7.6 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Rootkit (T1014); ranked at the 41th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified map to PL-8 (Security and Privacy Architectures) and SA-17 (Developer Security and Privacy Architecture and Design) — see the control section below for these in your framework.
Deeper analysis AI-assisted summary
Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.
CVE-2024-57176 is a directory traversal vulnerability in the shiroFilter function of the White-Jotter project version 0.2.2. The issue enables attackers to access sensitive endpoints via a crafted URL. It carries a CVSS v3.1 base score of 7.6 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) and is classified under CWE-437.
The vulnerability can be exploited remotely by an attacker with low privileges over the network with low attack complexity and no user interaction required. Successful exploitation allows directory traversal to reach sensitive endpoints, resulting in high confidentiality impact through unauthorized data access, along with low-level integrity modification and availability disruption.
The referenced advisory at https://github.com/DYX217/Incorrect-Access-Control provides further details on this incorrect access control issue.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-4488
Vulnerability Data
An issue in the shiroFilter function of White-Jotter project v0.2.2 allows attackers to execute a directory traversal and access sensitive endpoints via a crafted URL.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise Techniques
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Requires explicit security architectures that describe component interactions and behaviors, directly reducing the chance of building an incomplete endpoint model.
Requires developers to produce designs that document security-relevant behaviors and state of system components including endpoints.
Mandates application of engineering principles such as complete mediation and accurate abstraction that structurally avoid incomplete endpoint models.
Mitigating Controls (NIST CSF 2.0) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.
CWE-437's incomplete endpoint model directly impairs a monitor's detection logic (mostly degrading DE.CM-01's adverse-event finding), while the same flaw removes most of the monitoring outcome's reliability across its scope.
CWE-437 can cause monitoring/containment products to take incorrect actions due to an incomplete endpoint model, impairing (but not fully defeating) RS.MI-01's automatic or manual containment capability.
Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.
Security testing can validate that the intermediary correctly handles all documented and undocumented endpoint features.
Network security controls can enforce endpoint capability discovery and validation, reducing the risk of acting on an incomplete model.
Defining security requirements for network services can include explicit endpoint feature negotiation and state tracking.
A secure SDLC can mandate complete endpoint capability modeling during design and threat modeling phases.
Application security requirements can specify the need for exhaustive endpoint feature, behavior, and state modeling.
Secure architecture principles emphasize complete system modeling, including all endpoint capabilities and states.