Beveiligingsadvies

CVE-2024-38446

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-07-17 00:00:00

Laatst bijgewerkt 2024-11-07 16:01:16

Toegewezen door mitre

CVSS-score 6.5

Status PUBLISHED

Beschrijving

NATO NCI ANET 3.4.1 mishandles report ownership. A user can create a report and, despite the restrictions imposed by the UI, change the author of that report to an arbitrary user (without their consent or knowledge) via a modified UUID in a POST request.

← Alle CVE's bekijken Bekijk op cve.org ↗