← Back

CVE-2024-46897

nvd nist
Published: Oct 18, 2024Modified: Oct 22, 2024

JSON object

Loading...
3.8
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
Exploitability: 1.2 / Impact: 2.5
Source: NVD

Description

Incorrect permission assignment for critical resource issue exists in Exment v6.1.4 and earlier and Exment v5.0.11 and earlier. A logged-in user with the permission of table management may obtain and/or alter the information of the unauthorized table.

Affected (2)

Products: Exceedone: Exment
Exceedone
1 product
Exment
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Exceedone
Exment
Before 5.0.11
Exment
From 6.0.0 to 6.1.4

Related CWEs

CWE-732
Incorrect Permission Assignment for Critical Resource
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (3)

Source: vultures@jpcert.or.jp
Vendor Advisory
Source: vultures@jpcert.or.jp
Vendor Advisory
Source: vultures@jpcert.or.jp
Third Party Advisory

Timeline

No history available yet.