Security Advisory

CVE-2024-12056

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-12-04 14:30:35

Last updated 2024-12-04 15:00:50

Assigner arcinfo

State PUBLISHED

Description

The Client secret is not checked when using the OAuth Password grant type. By exploiting this vulnerability, an attacker could connect to a web server using a client application not explicitly authorized as part of the OAuth deployment. Exploitation requires valid credentials and does not permit the attacker to bypass user privileges.

← Browse all CVEs View on cve.org ↗