mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-28 17:21:36 +00:00
64 lines
2.4 KiB
JSON
64 lines
2.4 KiB
JSON
{
|
|
"id": "CVE-2024-4215",
|
|
"sourceIdentifier": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
|
|
"published": "2024-05-02T18:15:07.593",
|
|
"lastModified": "2024-08-01T13:59:27.703",
|
|
"vulnStatus": "Awaiting Analysis",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "pgAdmin <= 8.5 is affected by a multi-factor authentication bypass vulnerability. This vulnerability allows an attacker with knowledge of a legitimate account\u2019s username and password may authenticate to the application and perform sensitive actions within the application, such as managing files and executing SQL queries, regardless of the account\u2019s MFA enrollment status.\n"
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "pgAdmin <= 8.5 se ve afectado por una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n multifactor. Esta vulnerabilidad permite que un atacante con conocimiento del nombre de usuario y la contrase\u00f1a de una cuenta leg\u00edtima pueda autenticarse en la aplicaci\u00f3n y realizar acciones confidenciales dentro de la aplicaci\u00f3n, como administrar archivos y ejecutar consultas SQL, independientemente del estado de inscripci\u00f3n en MFA de la cuenta."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV31": [
|
|
{
|
|
"source": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
|
|
"type": "Secondary",
|
|
"cvssData": {
|
|
"version": "3.1",
|
|
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
|
|
"attackVector": "NETWORK",
|
|
"attackComplexity": "LOW",
|
|
"privilegesRequired": "LOW",
|
|
"userInteraction": "NONE",
|
|
"scope": "CHANGED",
|
|
"confidentialityImpact": "LOW",
|
|
"integrityImpact": "LOW",
|
|
"availabilityImpact": "LOW",
|
|
"baseScore": 7.4,
|
|
"baseSeverity": "HIGH"
|
|
},
|
|
"exploitabilityScore": 3.1,
|
|
"impactScore": 3.7
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
|
"type": "Secondary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-89"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "https://github.com/pgadmin-org/pgadmin4/issues/7425",
|
|
"source": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"
|
|
},
|
|
{
|
|
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T2YFVCB4HCXU3FQBZ5XTWJZWSZUDNCXE/",
|
|
"source": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"
|
|
}
|
|
]
|
|
} |