Lucene search
A5532a13-c4dd-4202-bef1-e0b8f2f8d12bNVD:CVE-2024-5322HistoryJul 01, 2024 - 9:15 p.m.
CVE-2024-5322
2024-07-0121:15:04
CWE-288
a5532a13-c4dd-4202-bef1-e0b8f2f8d12b
web.nvd.nist.gov
2
n-central
vulnerability
session rebinding
entra sso
authentication bypass
cve-2024-5322
security issue
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
0.0004 Low
EPSS
Percentile
9.2%
The N-central server is vulnerable to session rebinding of already authenticated users when using Entra SSO, which can lead to authentication bypass.
This vulnerability is present in all Entra-supported deployments of N-central prior to 2024.3.
Related
cvelist
cvelist
CVE-2024-5322 N-central Authentication Bypass via Session Rebinding
2024-07-01 20:46:40
vulnrichment
vulnrichment
CVE-2024-5322 N-central Authentication Bypass via Session Rebinding
2024-07-01 20:46:40
cve
cve
CVE-2024-5322
2024-07-01 21:15:04
9.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
0.0004 Low
EPSS
Percentile
9.2%
Related for NVD:CVE-2024-5322