{ "id": "CVE-2024-27453", "sourceIdentifier": "cve@mitre.org", "published": "2024-05-03T18:15:09.250", "lastModified": "2024-05-06T12:44:56.377", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "In Extreme XOS through 22.6.1.4, a read-only user can escalate privileges to root via a crafted HTTP POST request to the python method of the Machine-to-Machine Interface (MMI)." }, { "lang": "es", "value": "En Extreme XOS hasta 22.6.1.4, un usuario de solo lectura puede escalar privilegios a root mediante una solicitud HTTP POST manipulada al m\u00e9todo Python de la interfaz m\u00e1quina a m\u00e1quina (MMI)." } ], "metrics": {}, "references": [ { "url": "https://extreme-networks.my.site.com/ExtrArticleDetail?an=000118266", "source": "cve@mitre.org" }, { "url": "https://www.exsiliumsecurity.com/CVE-2024-27453.html", "source": "cve@mitre.org" } ] }