Beveiligingsadvies

CVE-2024-49376

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-10-25 12:50:33

Laatst bijgewerkt 2024-10-25 15:05:44

Toegewezen door GitHub_M

CVSS-score 7.1

Status PUBLISHED

Beschrijving

Autolab, a course management service that enables auto-graded programming assignments, has misconfigured reset password permissions in version 3.0.0. For email-based accounts, users with insufficient privileges could reset and theoretically access privileged users' accounts by resetting their passwords. This issue is fixed in version 3.0.1. No known workarounds exist.

← Alle CVE's bekijken Bekijk op cve.org ↗