exploitDog

GHSA-rm55-q8p7-j3g6

Опубликовано: 25 июл. 2023

Источник: github

Github: Не прошло ревью

CVSS3: 7.6

Описание

Improper privilege validation in Command Centre Server allows authenticated operators to modify Division lineage.

This issue affects Command Centre: vEL8.80 prior to vEL8.80.1192 (MR2), vEL8.70 prior to vEL8.70.2185 (MR4), vEL8.60 prior to vEL8.60.2347 (MR6), vEL8.50 prior to vEL8.50.2831(MR8), vEL8.40 and prior.

Improper privilege validation in Command Centre Server allows authenticated operators to modify Division lineage.

This issue affects Command Centre: vEL8.80 prior to vEL8.80.1192 (MR2), vEL8.70 prior to vEL8.70.2185 (MR4), vEL8.60 prior to vEL8.60.2347 (MR6), vEL8.50 prior to vEL8.50.2831(MR8), vEL8.40 and prior.

Ссылки

EPSS

Процентиль: 11%

0.00037

Низкий

7.6 High

CVSS3

CVE ID

Дефекты

CWE-285

Связанные уязвимости

CVE-2023-22428

CVSS3: 7.6

nvd

больше 2 лет назад

Improper privilege validation in Command Centre Server allows authenticated operators to modify Division lineage. This issue affects Command Centre: vEL8.80 prior to vEL8.80.1192 (MR2), vEL8.70 prior to vEL8.70.2185 (MR4), vEL8.60 prior to vEL8.60.2347 (MR6), vEL8.50 prior to vEL8.50.2831(MR8), vEL8.40 and prior.

EPSS

Процентиль: 11%

0.00037

Низкий

7.6 High

CVSS3

CVE ID

Дефекты

CWE-285