CVE-2024-49209

Katalog CVE

CVSS 4.3 · Medium EPSS 0,26%

Kerentanan Incorrect Authorization pada archerirm archer. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

Archer Platform 2024.03 before version 2024.09 is affected by an API authorization bypass vulnerability related to supporting application files. A remote unprivileged attacker could potentially exploit this vulnerability to elevate their privileges and upload additional system icons.

Rincian

Terbit di NVD

22 Oktober 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-863: Incorrect Authorization

EPSS (30 hari)

0,26% peluang dieksploitasi; lebih tinggi dari 16,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.archerirm.community/t5/platform-announcements/archer-update-for-multiple-vulnerabilities/ta-p/7475... advisory vendor
• https://www.archerirm.community/t5/platform-announcements/tkb-p/product-advisories-tkb advisory vendor