{ "id": "CVE-2024-36542", "sourceIdentifier": "cve@mitre.org", "published": "2024-07-25T17:15:10.710", "lastModified": "2024-07-26T12:38:41.683", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "Insecure permissions in kuma v2.7.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token." }, { "lang": "es", "value": "Los permisos inseguros en kuma v2.7.0 permiten a los atacantes acceder a datos confidenciales y escalar privilegios obteniendo el token de la cuenta de servicio." } ], "metrics": {}, "references": [ { "url": "https://gist.github.com/HouqiyuA/e1685843b6f42b47dbf97e2e92e63428", "source": "cve@mitre.org" } ] }