Lucene search

TR-CERTCVELIST:CVE-2024-4341

HistoryJul 08, 2024 - 1:46 p.m.

CVE-2024-4341 Information Disclosure in ExtremePacs's Extreme XDS

2024-07-0813:46:12

CWE-269

TR-CERT

www.cve.org

cve-2024-4341

information disclosure

extreme xds

privilege management

vulnerability

ekstrem bir bilgisayar danismanlik ic ve dis ticaret ltd. sti.

collect data

users

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

17.7%

JSON

Improper Privilege Management vulnerability in Ekstrem Bir Bilgisayar Danismanlik Ic Ve Dis Ticaret Ltd. Sti. Extreme XDS allows Collect Data as Provided by Users.This issue affects Extreme XDS: before 3928.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Extreme XDS",
    "vendor": "ExtremePacs",
    "versions": [
      {
        "lessThan": "3928",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.usom.gov.tr/bildirim/tr-24-0893

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

17.7%

JSON

Related for CVELIST:CVE-2024-4341