Improper Access Control

2024-02-2005:59:37

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

ipmctl

vulnerability

access control

authenticated user

unauthorized access

security compromise

CVSS3

6.6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H

AI Score

6.8

Confidence

High

EPSS

Percentile

9.0%

JSON

ipmctl is vulnerable to Improper Access Control. The vulnerability due to lack of proper access controls means that an authenticated user could gain unauthorized access to certain functionalities or perform actions. It allows an attacker could gain higher levels of access or control over the affected system, potentially leading to further security compromises.