Lucene search
MicrosoftMS:CVE-2024-38176HistoryJul 23, 2024 - 7:00 a.m.
GroupMe Elevation of Privilege Vulnerability
2024-07-2307:00:00
Microsoft
msrc.microsoft.com
3
network privilege elevation
groupme vulnerability
microsoft
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.3
Confidence
Low
EPSS
0.002
Percentile
61.1%
An improper restriction of excessive authentication attempts in GroupMe allows a unauthenticated attacker to elevate privileges over a network.
Related
nvd
nvd
CVE-2024-38176
2024-07-23 22:15:08
cvelist
cvelist
CVE-2024-38176 GroupMe Elevation of Privilege Vulnerability
2024-07-23 21:26:48
cve
cve
CVE-2024-38176
2024-07-23 22:15:08
vulnrichment
vulnrichment
CVE-2024-38176 GroupMe Elevation of Privilege Vulnerability
2024-07-23 21:26:48
kaspersky
kaspersky
KLA71014 PE vulnerabilities in Microsoft Apps
2024-07-23 00:00:00
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.3
Confidence
Low
EPSS
0.002
Percentile
61.1%
Related for MS:CVE-2024-38176