CVE-2024-46480

Name of the Vulnerable Software and Affected Versions: Venki Supravizio BPM versions up to 18.0.1

Description: The issue is related to an NTLM hash leak, which allows authenticated attackers with Application Administrator access to escalate privileges on the underlying host system. This can be exploited by attackers to gain higher privileges.

Recommendations: For versions up to 18.0.1, update to a version later than 18.0.1 to resolve the issue. As a temporary workaround, consider restricting access to the Application Administrator role to minimize the risk of exploitation.