[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbdn0UYG1ESWGIpMlZ712WFNmMd0iJPbsC2g7upp1xlI":3,"g5a-risk:CVE-2024-36041":143},{"success":4,"data":5,"meta":140},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":26,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":49,"references":50,"referencesCount":88,"weaknesses":89,"weaknessesCount":49,"isActivelyExploited":98,"cisaInfo":26,"otxData":26,"relatedBlogPosts":99,"seoMetadata":100,"configurations":125,"relatedVendorCves":138,"notableEvents":139},"CVE-2024-36041","What is CVE-2024-36041?","KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the session-restore feature to execute arbitrary code as the victim (on the next boot) via earlier use of the \u002Ftmp directory.","KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., a...","2024-07-05T02:15:10","2026-06-17T07:36:00.933",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":37,"CVSSMetricV2":38,"CVSSMetricV40":39},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":36,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":34,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":35,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H","REQUIRED",7.3,1.3,[],[],[],0.00296,[40,40,40,40,40,40,40],"High",[44],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"kde","plasma-workspace","*","cpe:2.3:a:kde:plasma-workspace:*:*:*:*:*:*:*:*",1,[51,56,61,65,69,71,73,75,79,83,86],{"url":52,"source":53,"tags":54},"https:\u002F\u002Fgithub.com\u002FKDE\u002Fplasma-workspace\u002Ftags","GitHub",[55],"Release Notes",{"url":57,"source":58,"tags":59},"https:\u002F\u002Finvent.kde.org\u002Fplasma\u002Fplasma-workspace\u002F","Kde",[60],"Product",{"url":62,"source":58,"tags":63},"https:\u002F\u002Fkde.org\u002Finfo\u002Fsecurity\u002Fadvisory-20240531-1.txt",[64],"Vendor Advisory",{"url":66,"source":67,"tags":68},"https:\u002F\u002Fwww.x.org\u002Freleases\u002FX11R7.7\u002Fdoc\u002FlibSM\u002Fxsmp.html","X",[60],{"url":52,"source":53,"tags":70},[55],{"url":57,"source":58,"tags":72},[60],{"url":62,"source":58,"tags":74},[64],{"url":76,"source":77,"tags":78},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F06\u002Fmsg00002.html","Debian",[],{"url":80,"source":81,"tags":82},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F43YGQJGB5I33UBRY2OHXTPXIEESZLZ6N\u002F","Fedoraproject",[],{"url":84,"source":81,"tags":85},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FDNOZWSWXAR6EM3VIUJRSAI3L4QPURQPC\u002F",[],{"url":66,"source":67,"tags":87},[60],11,[90],{"id":91,"name":92,"description":93,"extendedDescription":94,"status":95,"abstraction":96,"structure":97},"CWE-613","Insufficient Session Expiration","According to WASC, \"Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization.\"","","Incomplete","Base","Simple",false,[],{"title":101,"metaDescription":102,"keywords":103,"canonicalUrl":104,"structuredData":105},"What is CVE-2024-36041? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-36041, a high severity cyber security vulnerability from 2024. KSmserver in KDE Plasma Workspace (aka plasma-workspace) be...","CVE-2024-36041, CVE-2024-36041 vulnerability, CVE-2024-36041 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, kde security, plasma-workspace vulnerability","\u002Fwhat-is\u002Fcve-2024-36041",{"@context":106,"@type":107,"headline":101,"description":102,"datePublished":10,"dateModified":11,"author":108,"publisher":112,"about":116,"mainEntityOfPage":120,"articleSection":123,"keywords":124},"https:\u002F\u002Fschema.org","TechArticle",{"@type":109,"name":110,"url":111},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":109,"name":110,"url":111,"logo":113},{"@type":114,"url":115},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":117,"name":6,"description":118,"additionalType":119},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":121,"@id":122},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-36041","Cybersecurity","CVE-2024-36041, CVE-2024-36041 vulnerability, CVE-2024-36041 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[126],{"Operator":26,"Negate":26,"Nodes":127},[128],{"Operator":129,"Negate":98,"CPEMatch":130},"OR",[131,134],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":132,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":133,"VersionEndIncluding":26},"34F84782-CEA1-4797-A2C4-C575F10D1EDC","5.27.11.1",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":135,"VersionStartExcluding":26,"VersionStartIncluding":136,"VersionEndExcluding":137,"VersionEndIncluding":26},"89B45E9D-1DB8-486E-9BFA-2D651B9C8685","6.0.0.0","6.0.5.1",[],[],{"lastModified":11,"cacheTime":141,"version":142},1792358896848,"2.0",{"score":144,"band":145,"action":146,"scoredAt":147},46,"Medium","Plan remediation","2026-10-16T07:03:01.963082+00:00"]