Lucene search
HistoryApr 29, 2024 - 9:15 a.m.
CVE-2024-3375
cve-2024-3375
vulnerability
havelsan inc. dialogue
permission assignment
acls
CVSS3
9.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
AI Score
9.4
Confidence
High
EPSS
0.001
Percentile
37.2%
Incorrect Permission Assignment for Critical Resource vulnerability in Havelsan Inc. Dialogue allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Dialogue: from v1.83 before v1.83.1 or v1.84.
References
Related
cve
cve
CVE-2024-3375
2024-04-29 09:15:09
vulnrichment
vulnrichment
CVE-2024-3375 Broken Access Control in Havelsan's Dialogue
2024-04-29 09:00:09
cvelist
cvelist
CVE-2024-3375 Broken Access Control in Havelsan's Dialogue
2024-04-29 09:00:09
CVSS3
9.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
AI Score
9.4
Confidence
High
EPSS
0.001
Percentile
37.2%
Related for NVD:CVE-2024-3375