CVE-2024-8042

Katalog CVE

CVSS 3.1 · Low EPSS 0,18%

Kerentanan Missing Authorization pada rapid7 insight platform. Skor CVSS 3.1 3.1 (Low) menurut NVD.

Deskripsi (NVD)

Rapid7 Insight Platform versions between November 2019 and August 14, 2024 suffer from missing authorization issues whereby an attacker can intercept local requests to set the name and description of a new user group. This could potentially lead to an empty user group being added to the incorrect customer. This vulnerability is remediated as of August 14, 2024.

Rincian

Terbit di NVD

9 September 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

3.1 (Low), sumber NVD
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-862: Missing Authorization

EPSS (30 hari)

0,18% peluang dieksploitasi; lebih tinggi dari 7,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cwe.mitre.org/data/definitions/862.html not applicable