CVE-2024-7265

CVE-2024-7265 affects Naukowa i Akademicka Sieć Komputerowa EZD RP. The vendor reports an Incorrect User Management flaw that lets a logged-in user change the password of any user, including root, enabling privilege escalation. Affected EZD RP versions span from 15 before 15.84, 16 before 16.15, ...

CVE-2024-7266

CVE-2024-7266 describes an Incorrect User Management vulnerability in EZD RP (Naukowa i Akademicka Sieć Komputerowa – Państwowy Instytut Badawczy EZD RP). The issue permits any logged-in user to list all users in the system, including users from other organizations. Affected EZD RP versions are: ...

CVE-2024-7267

CVE-2024-7267 affects EZD RP (Naukowa i Akademicka Sieć Komputerowa) where all versions before 19.6 are affected. Logged-in users can retrieve information about IP infrastructure and credentials, indicating a confidentiality impact (HIGH). The provided sources describe the vulnerability scope but...