Lucene search
HistoryJan 25, 2024 - 3:15 p.m.
CVE-2024-0879
cve-2024-0879
vector-admin
authentication bypass
unauthorized user registration
domain restriction
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
EPSS
0
Percentile
14.0%
Authentication bypass in vector-admin allows a user to register to a vector-admin server while “domain restriction” is active, even when not owning an authorized email address.
Affected configurations
Node
mintplexlabsvector_adminRange<2024-01-23
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mintplexlabs | vector_admin | * | cpe:2.3:a:mintplexlabs:vector_admin:*:*:*:*:*:*:*:* |
Related
prion
prion
Authentication flaw
2024-01-25 15:15:00
cvelist
cvelist
CVE-2024-0879 Authentication bypass in vector-admin domain restriction
2024-01-25 14:41:25
cve
cve
CVE-2024-0879
2024-01-25 15:15:07
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
EPSS
0
Percentile
14.0%
Related for NVD:CVE-2024-0879