Lucene search

Veracode Vulnerability DatabaseVERACODE:48220

HistoryJul 25, 2024 - 3:10 a.m.

Improper Access Control

2024-07-2503:10:50

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

access control

sensitive data

escalate privileges

attackers

software

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.6

Confidence

High

JSON

github.com/layer5io/meshery is vulnerable to Improper Access Control. The vulnerability is due to improperly configured permissions allowing access to sensitive data and escalate privileges by obtaining the service account’s token. Attackers can exploit this vulnerability to access sensitive information and escalate their privileges within the system.

References

gist.github.com/HouqiyuA/2950c3993cdeff23afcbd73ba7a33879

github.com/meshery/meshery/issues/10808

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.6

Confidence

High

JSON

Related for VERACODE:48220