PT-2024-27054

CVE-2024-36534

·

Published

2024-07-24

·

Updated

2024-08-27

Description by

CVSS 3.1
8.4
High
MetricsAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions hwameistor version 0.14.3
Description The issue allows attackers to access sensitive data and escalate privileges by obtaining the service account's token due to insecure permissions.
Recommendations For hwameistor version 0.14.3, update to a newer version that addresses the insecure permissions issue to prevent attackers from accessing sensitive data and escalating privileges.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-266: Incorrect Privilege Assignment
Related identifiers
CVE-2024-36534
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com