CVE-2024-26139

Published May 23, 2024

Last updated 9 months ago

CVSS high 8.3

Overview

Description
OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. Due to lack of certain security controls on the profile edit functionality, an authenticated attacker with low privileges can gain administrative privileges on the web application.
Source
security-advisories@github.com
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
8.3
Impact score
5.5
Exploitability score
2.8
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Severity
HIGH

Weaknesses

security-advisories@github.com
CWE-284

Social media

Hype score
Not currently trending

  1. Just published the blog post with details on OpenCTI’s privilege escalation (CVE-2024-26139) that I found around February! Took me long enough 😅 https://t.co/i6tBbRUu1n

    @AtticsWalula

    28 Dec 2024

    8 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

References