CVE-2024-4843

CVSS V2 None CVSS V3 None

Description

ePO doesn't allow a regular privileged user to delete tasks or assignments. Insecure direct object references that allow a least privileged user to manipulate the client task and client task assignments, hence escalating his/her privilege.

Overview

CVE ID
CVE-2024-4843

Assigner
trellix

Vulnerability Status
PUBLISHED

Published Version
2024-05-16T06:04:05.471Z

Last Modified Date
2024-06-04T17:54:26.124Z

Weakness Enumerations

CWE	URL
CWE-639	http://cwe.mitre.org/data/definitions/639.html

References

Reference URL	Reference Tags
https://thrive.trellix.com/s/article/000013505

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-4843
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4843

History

Created	Old Value	New Value	Data Type	Notes
2024-06-23 22:26:53				Added to TrackCVE