Lucene search
HistoryMar 29, 2024 - 3:15 p.m.
CVE-2024-23537
apache fineract
privilege management
vulnerability
upgrade
8.4 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
8.3 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
15.7%
Improper Privilege Management vulnerability in Apache Fineract.This issue affects Apache Fineract: <1.8.5.
Users are recommended to upgrade to version 1.9.0, which fixes the issue.
Affected configurations
Node
apachefineractRange≤1.9.0
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Apache Fineract",
"vendor": "Apache Software Foundation",
"versions": [
{
"lessThan": "1.9.0",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
]Related
cnvd
cnvd
Apache Fineract Elevation of Privilege Vulnerability
2024-04-02 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2024-23537
2024-03-29 15:15:10
8.4 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
8.3 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
15.7%
Related for CVE-2024-23537