Lucene search
Veracode Vulnerability DatabaseVERACODE:48026HistoryJul 11, 2024 - 6:20 a.m.
Authorization Bypass
2024-07-1106:20:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
authorization bypass
improper verification
private tenant resources
notebooks
vulnerable software
CVSS3
4.2
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
AI Score
6.7
Confidence
High
org.opensearch.plugin, opensearch-observability is vulnerable to Authorization Bypass. The vulnerability is due to improper verification of the resource author, allowing attackers to access private tenant resources such as notebooks.
Related
osv
osv
CVE-2024-39901
2024-07-09 22:15:03
nvd
nvd
CVE-2024-39901
2024-07-09 22:15:03
cvelist
cvelist
cve
cve
CVE-2024-39901
2024-07-09 22:15:03
vulnrichment
vulnrichment
github
github
redos
redos
ROS-20240716-01
2024-07-16 00:00:00
CVSS3
4.2
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
AI Score
6.7
Confidence
High
Related for VERACODE:48026