← Back

CVE-2024-48941

nvd nist
Published: Oct 10, 2024Modified: Oct 11, 2024

JSON object

Loading...
5.4
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.5
Source: NVD

Description

The Syracom Secure Login (2FA) plugin for Jira, Confluence, and Bitbucket through 3.1.4.5 allows remote attackers to bypass 2FA by interacting with the /rest endpoint of Jira, Confluence, or Bitbucket. In the default configuration, /rest is allowlisted.

Affected (3)

Syracom
1 product
Secure Login
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Syracom
Secure Login
Up to 3.1.4.5
Secure Login
Up to 3.1.4.5
Secure Login
Up to 3.1.4.5

Related CWEs

CWE-266
Incorrect Privilege Assignment
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

References (1)

Source: cve@mitre.org
Vendor Advisory

Timeline

No history available yet.