PT-2024-28099
CVE-2024-38646
·
تاريخ النشر
2024-02-22
·
تاريخ التحديث
2024-11-27
الوصف من
CVSS 4.0
8.4
عاليةالمقاييسAV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions
Notes Station 3 versions prior to 3.9.7
Description
An incorrect permission assignment for critical resource vulnerability has been reported. If exploited, the vulnerability could allow local authenticated attackers who have gained administrator access to read or modify the resource.
Recommendations
For Notes Station 3 versions prior to 3.9.7, update to version 3.9.7 or later to secure against potential attacks. As a temporary workaround, consider restricting access to critical resources until the update is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾