mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-28 01:02:25 +00:00
25 lines
841 B
JSON
25 lines
841 B
JSON
{
|
|
"id": "CVE-2024-55570",
|
|
"sourceIdentifier": "cve@mitre.org",
|
|
"published": "2025-03-03T16:15:38.900",
|
|
"lastModified": "2025-03-03T16:15:38.900",
|
|
"vulnStatus": "Received",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "/api/user/users in the web GUI for the Cubro EXA48200 network packet broker (build 20231025055018) fixed in V5.0R14.5P4-V3.3R1 allows remote authenticated users of the application to increase their privileges by sending a single HTTP PUT request with rolename=Administrator, aka incorrect access control."
|
|
}
|
|
],
|
|
"metrics": {},
|
|
"references": [
|
|
{
|
|
"url": "https://herolab.usd.de/security-advisories/",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "https://herolab.usd.de/security-advisories/usd-2024-0014/",
|
|
"source": "cve@mitre.org"
|
|
}
|
|
]
|
|
} |