CVE-2024-7266

NVD Published Date: August 07, 2024 at 11:15 AM

NVD Last Modified: August 23, 2024 at 03:09 PM

Download Patch

Vulnerability ID

CVE-2024-7266

Severity

MEDIUM

Severity Score

4.3

Summary

Incorrect User Management vulnerability in Naukowa i Akademicka Sie? Komputerowa - Pa?stwowy Instytut Badawczy EZD RP allows logged-in user to list all users in the system, including those from other organizations. This issue affects EZD RP: from 15 before 15.84, from 16 before 16.15, from 17 before 17.2.

References

https://cert.pl/en/posts/2024/08/CVE-2023-7265/

https://cert.pl/posts/2024/08/CVE-2023-7265/

https://www.gov.pl/web/ezd-rp

Mitigation and Patches

Exploits

Metasploit Payload

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE ID

CWE-863

Recent Publish

CVE-2024-7267

CVE-2024-7353

CVE-2024-7355

CVE-2024-7578

2024-07 Dynamic Cumulative Update for Windows 11 for x64-based Systems (KB5040431)

2024-07 Dynamic Cumulative Update for Windows 11 for ARM64-based Systems (KB5040431)

See SecOps Solution
in action

Schedule Demo

Agentless security for your infrastructure and applications - to build faster, more securely and in a fraction of the operational cost of other solutions

CVE-2024-7266

Recent Publish

See SecOps Solution
in action

Products

Compare

Company

Resources

Try It

CVE-2024-7266

Recent Publish

See SecOps Solutionin action

Products

Compare

Company

Resources

Try It

See SecOps Solution
in action