Lucene search
GoogleOSV:CVE-2024-6302HistoryJun 25, 2024 - 1:15 p.m.
CVE-2024-6302
2024-06-2513:15:51
Google
osv.dev
cve-2024-6302
conduit
redaction
privilege checking
security issue
local user
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
AI Score
6.7
Confidence
High
Lack of privilege checking when processing a redaction in Conduit versions v0.6.0 and lower, allowing a local user to redact any message from users on the same server, given that they are able to send redaction events.
Related
cve
cve
CVE-2024-6302
2024-06-25 13:15:51
vulnrichment
vulnrichment
nvd
nvd
CVE-2024-6302
2024-06-25 13:15:51
cvelist
cvelist
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
AI Score
6.7
Confidence
High
Related for OSV:CVE-2024-6302