Lucene search

PatchstackCVE-2024-43311

HistoryAug 19, 2024 - 8:15 p.m.

CVE-2024-43311

2024-08-1920:15:07

CWE-269

Patchstack

web.nvd.nist.gov

cve-2024-43311

privilege escalation

geek code lab

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

Percentile

9.5%

JSON

Improper Privilege Management vulnerability in Geek Code Lab Login As Users allows Privilege Escalation.This issue affects Login As Users: from n/a through 1.4.2.

Affected configurations

Vulners

Vulnrichment

Node

geek_code_labpassword_protected_storeRange≤1.4.2wordpress

VendorProductVersionCPE
geek_code_labpassword_protected_store*cpe:2.3:a:geek_code_lab:password_protected_store:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
geek_code_lab	password_protected_store	*	cpe:2.3:a:geek_code_lab:password_protected_store::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "login-as-users",
    "product": "Login As Users",
    "vendor": "Geek Code Lab",
    "versions": [
      {
        "changes": [
          {
            "at": "1.4.3",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.4.2",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/login-as-users/wordpress-login-as-users-plugin-1-4-2-broken-authentication-vulnerability?_s_id=cve

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

Percentile

9.5%

JSON

Related for CVE-2024-43311