Security Advisory

CVE-2024-6908

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-07-19 14:57:00

Last updated 2024-08-01 21:45:38

Assigner Yugabyte

State PUBLISHED

Description

Improper privilege management in Yugabyte Platform allows authenticated admin users to escalate privileges to SuperAdmin via a crafted PUT HTTP request, potentially leading to unauthorized access to sensitive system functions and data.

← Browse all CVEs View on cve.org ↗