CVE-2024-49208

Katalog CVE

CVSS 3.1 · Low EPSS 0,27%

Kerentanan Incorrect Authorization pada archerirm archer. Skor CVSS 3.1 3.1 (Low) menurut NVD.

Deskripsi (NVD)

Archer Platform 2024.03 before version 2024.08 is affected by an authorization bypass vulnerability related to supporting application files. A remote unprivileged attacker could potentially exploit this vulnerability to elevate their privileges and delete system icons.

Rincian

Terbit di NVD

22 Oktober 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.1 (Low), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-863: Incorrect Authorization

EPSS (30 hari)

0,27% peluang dieksploitasi; lebih tinggi dari 18,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/7475... advisory vendor
• https://www.archerirm.community/t5/platform-announcements/tkb-p/product-advisories-tkb advisory vendor