Lucene search

MicrosoftCVE-2024-38176

HistoryJul 23, 2024 - 10:15 p.m.

CVE-2024-38176

2024-07-2322:15:08

CWE-307

microsoft

web.nvd.nist.gov

groupme

authentication restriction

unauthenticated

privilege escalation

network

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.2

Confidence

High

EPSS

0.002

Percentile

61.1%

JSON

An improper restriction of excessive authentication attempts in GroupMe allows a unauthenticated attacker to elevate privileges over a network.

Affected configurations

Nvd

Vulners

Node

microsoftgroupmeMatch-

VendorProductVersionCPE
microsoftgroupme-cpe:2.3:a:microsoft:groupme:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	groupme	-	cpe:2.3:a:microsoft:groupme:-:::::::*

CNA Affected

[
  {
    "vendor": "Microsoft",
    "product": "GroupMe",
    "cpes": [
      "cpe:2.3:a:microsoft:groupme:*:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "N/A",
        "status": "affected"
      }
    ]
  }
]

References

msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38176

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.2

Confidence

High

EPSS

0.002

Percentile

61.1%

JSON

Related for CVE-2024-38176