CVE-2024-29417

2024-05-0300:00:00

mitre

www.cve.org

insecure permissions

e-trust horacius

local attacker

privilege escalation

password reset function

AI Score

6.9

Confidence

High

EPSS

Percentile

9.0%

JSON

Insecure Permissions vulnerability in e-trust Horacius 1.0, 1.1, and 1.2 allows a local attacker to escalate privileges via the password reset function.

References

blog.pridesec.com.br/en/horacius-unauthenticated-privilege-escalation/