Lucene search
HistoryMay 29, 2024 - 4:15 p.m.
CVE-2024-36427
targit decision suite
file-serving function
authenticated attackers
crafted file request
code execution
.xview file
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
AI Score
6.7
Confidence
Low
The file-serving function in TARGIT Decision Suite 23.2.15007 allows authenticated attackers to read or write to server files via a crafted file request. This can allow code execution via a .xview file.
Related
vulnrichment
vulnrichment
CVE-2024-36427
1976-01-01 00:00:00
cvelist
cvelist
CVE-2024-36427
1976-01-01 00:00:00
cve
cve
CVE-2024-36427
2024-05-29 16:15:11
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
AI Score
6.7
Confidence
Low
Related for NVD:CVE-2024-36427