PT-2026-70234 · Unknown · Velociraptor
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Velociraptor (affected versions not specified)
Description
Any authenticated user, including those with the
reader role, can cause the entire server process to terminate by sending a single request. This occurs when calling the SetPassword() function using a username that does not exist.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Velociraptor