CVE-2024-36068

2024-08-2700:00:00

mitre

github.com

rubrik cdm

access control

vulnerability

arbitrary code execution

network access

EPSS

0.001

Percentile

39.7%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

An incorrect access control vulnerability in Rubrik CDM versions prior to 9.1.2-p1, 9.0.3-p6 and 8.1.3-p12, allows an attacker with network access to execute arbitrary code.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:rubrik:cdm:*:*:*:*:*:*:*:*"
    ],
    "vendor": "rubrik",
    "product": "cdm",
    "versions": [
      {
        "status": "affected",
        "version": "9.1.0",
        "lessThan": "9.1.2-p1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "9.0.0",
        "lessThan": "9.0.3-p6",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "8.1.3-p12",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]