CVE-2024-46480

Katalog CVE

CVSS 7.2 · High EPSS 0,49%

Kerentanan Insufficiently Protected Credentials pada venki supravizio bpm. Skor CVSS 3.1 7.2 (High) menurut NVD.

Deskripsi (NVD)

An NTLM hash leak in Venki Supravizio BPM up to 18.0.1 allows authenticated attackers with Application Administrator access to escalate privileges on the underlying host system.

Rincian

Terbit di NVD

13 Januari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-522: Insufficiently Protected Credentials

EPSS (30 hari)

0,49% peluang dieksploitasi; lebih tinggi dari 40,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/Lorenzo-de-Sa/Vulnerability-Research advisory pihak ketiga
• https://github.com/Lorenzo-de-Sa/Vulnerability-Research/blob/main/CVE-2024-46480.md advisory pihak ketiga
• https://www.venki.com.br/ferramenta-bpm/supravizio/ product