CVE-2024-36246 in Unifier

Sumário

de MITRE • 31/05/2024

Missing authorization vulnerability exists in Unifier and Unifier Cast Version.5.0 or later, and the patch "20240527" not applied. If this vulnerability is exploited, arbitrary code may be executed with LocalSystem privilege. As a result, a malicious program may be installed, data may be modified or deleted.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservar: 22/05/2024
• Divulgação: 31/05/2024
• Moderação: aceite
• Entrada: VDB-266760
• CPE: pronto
• CWE: CWE-862 (confirmado)
• CVSS: 9.8 (CNA)
• EPSS: 0.00546
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-36246
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-36246
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-36246/