Lucene search

K
nvd[email protected]NVD:CVE-2024-42021
HistorySep 07, 2024 - 5:15 p.m.

CVE-2024-42021

2024-09-0717:15:14
CWE-284
web.nvd.nist.gov
4
improper access control
attacker access
saved credentials

CVSS3

7.5

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS

0

Percentile

9.5%

An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials.

CVSS3

7.5

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS

0

Percentile

9.5%

Related for NVD:CVE-2024-42021