CVE-2024-36535

2024-07-2400:00:00

mitre

github.com

meshery

insecure permissions

access sensitive data

escalate privileges

AI Score

Confidence

High

SSVC

Exploitation

poc

Automatable

yes

Technical Impact

total

JSON

Insecure permissions in meshery v0.7.51 allows attackers to access sensitive data and escalate privileges by obtaining the service account’s token.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:layer5:meshery:0.7.51:*:*:*:*:*:*:*"
    ],
    "vendor": "layer5",
    "product": "meshery",
    "versions": [
      {
        "status": "affected",
        "version": "0.7.51"
      }
    ],
    "defaultStatus": "unknown"
  }
]