PT-2026-103531 · Kiteworks · Kiteworks Core
CVSS v3.1
7.2
High
| Vector | AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Kiteworks Core versions prior to 9.5.0
Description
Improper Privilege Management occurs because the software does not correctly enforce restrictions on role assignment. This allows an authenticated administrative user with limited, non-Sysadmin role-management permissions to elevate another user to full system-administrator privileges, exceeding the permissions the administrative user was authorized to grant.
Recommendations
Update Kiteworks Core to version 9.5.0 or later.
Fix
Improper Privilege Management
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Kiteworks Core