Lucene search
HistoryAug 02, 2024 - 9:16 p.m.
CVE-2024-38887
cve-2024-38887
horizon business services inc.
caterease 16.0.1.1663
caterease 24.0.1.2405
remote attack
operating system control
database vulnerability
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
68.1%
An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to expand control over the operating system from the database due to the execution of commands with unnecessary privileges.
Affected configurations
Node
horizoncloudcatereaseRange16.0.1.1663–24.0.1.2405
| Vendor | Product | Version | CPE |
|---|---|---|---|
| horizoncloud | caterease | * | cpe:2.3:a:horizoncloud:caterease:*:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2024-38887
2024-08-02 21:16:30
vulnrichment
vulnrichment
CVE-2024-38887
2024-08-02 00:00:00
cvelist
cvelist
CVE-2024-38887
2024-08-02 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
68.1%
Related for NVD:CVE-2024-38887