Логотип exploitDog
bind:CVE-2024-20282
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-20282

Количество 3

Количество 3

nvd логотип

CVE-2024-20282

почти 2 года назад

A vulnerability in Cisco Nexus Dashboard could allow an authenticated, local attacker with valid rescue-user credentials to elevate privileges to root on an affected device. This vulnerability is due to insufficient protections for a sensitive access token. An attacker could exploit this vulnerability by using this token to access resources within the device infrastructure. A successful exploit could allow an attacker to gain root access to the filesystem or hosted containers on an affected device.

CVSS3: 6
EPSS: Низкий
github логотип

GHSA-mg3q-349p-vcpv

почти 2 года назад

A vulnerability in Cisco Nexus Dashboard could allow an authenticated, local attacker with valid rescue-user credentials to elevate privileges to root on an affected device. This vulnerability is due to insufficient protections for a sensitive access token. An attacker could exploit this vulnerability by using this token to access resources within the device infrastructure. A successful exploit could allow an attacker to gain root access to the filesystem or hosted containers on an affected device.

CVSS3: 6
EPSS: Низкий
fstec логотип

BDU:2024-04197

почти 2 года назад

Уязвимость платформы аналитики и автоматизации работы с многооблачными сетями дата-центров Cisco Nexus Dashboard, связанная с недостатками разграничения доступ, позволяющая нарушителю повысить свои привилегии до уровня root

CVSS3: 6
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-20282

A vulnerability in Cisco Nexus Dashboard could allow an authenticated, local attacker with valid rescue-user credentials to elevate privileges to root on an affected device. This vulnerability is due to insufficient protections for a sensitive access token. An attacker could exploit this vulnerability by using this token to access resources within the device infrastructure. A successful exploit could allow an attacker to gain root access to the filesystem or hosted containers on an affected device.

CVSS3: 6
0%
Низкий
почти 2 года назад
github логотип
GHSA-mg3q-349p-vcpv

A vulnerability in Cisco Nexus Dashboard could allow an authenticated, local attacker with valid rescue-user credentials to elevate privileges to root on an affected device. This vulnerability is due to insufficient protections for a sensitive access token. An attacker could exploit this vulnerability by using this token to access resources within the device infrastructure. A successful exploit could allow an attacker to gain root access to the filesystem or hosted containers on an affected device.

CVSS3: 6
0%
Низкий
почти 2 года назад
fstec логотип
BDU:2024-04197

Уязвимость платформы аналитики и автоматизации работы с многооблачными сетями дата-центров Cisco Nexus Dashboard, связанная с недостатками разграничения доступ, позволяющая нарушителю повысить свои привилегии до уровня root

CVSS3: 6
0%
Низкий
почти 2 года назад

Уязвимостей на страницу