Lucene search

UpKeeperCVE-2024-42462

HistoryAug 16, 2024 - 2:15 p.m.

CVE-2024-42462

2024-08-1614:15:13

CWE-287

upKeeper

web.nvd.nist.gov

cve-2024-42462

upkeeper solutions

authentication bypass

upkeeper manager

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:H/VI:H/SI:H/VA:H/SA:H

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

39.6%

JSON

Improper Authentication vulnerability in upKeeper Solutions product upKeeper Manager allows Authentication Bypass.This issue affects upKeeper Manager: through 5.1.9.

Affected configurations

Nvd

Node

upkeeperupkeeper_managerRange<5.1.10

VendorProductVersionCPE
upkeeperupkeeper_manager*cpe:2.3:a:upkeeper:upkeeper_manager:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
upkeeper	upkeeper_manager	*	cpe:2.3:a:upkeeper:upkeeper_manager::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "upKeeper Manager",
    "vendor": "upKeeper Solutions",
    "versions": [
      {
        "lessThanOrEqual": "5.1.9",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

References

support.upkeeper.se/hc/en-us/articles/15432045399452-CVE-2024-42462-Bypass-multifactor-authentication

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:H/VI:H/SI:H/VA:H/SA:H

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

39.6%

JSON

Related for CVE-2024-42462