Lucene search

K
patchstackSkalucyPATCHSTACK:B32ACB949E841224E54C09125120543D
HistoryApr 25, 2024 - 12:00 a.m.

WordPress Client Dash Plugin <= 2.2.1 is vulnerable to Broken Access Control

2024-04-2500:00:00
Skalucy
patchstack.com
1
wordpress
client dash
vulnerable
broken access control
low severity
unauthenticated
cve-2024-33652

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

6.6

Confidence

High

Software

Client Dash

Type

Plugin

Vulnerable versions

<= 2.2.1

Fixed in

N/A

OWASP Top 10

A1: Broken Access Control

Classification

Broken Access Control

CVE

CVE-2024-33652

Patch priority

Low

CVSS severity

Low (5.3)

Developer

Claim ownership

PSID

999732255bed

Credits

Skalucy Skalucy

Required privilege

Unauthenticated

Published

25 April, 2024

Remove and replace plugin Expand full details Have additional information or questions about this entry? Let us know.

Solution

This security issue has a low severity impact and is unlikely to be exploited.

Affected configurations

Vulners
Node
-client_dashRange2.2.1
VendorProductVersionCPE
-client_dash*cpe:2.3:a:-:client_dash:*:*:*:*:*:*:*:*

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

6.6

Confidence

High

Related for PATCHSTACK:B32ACB949E841224E54C09125120543D