TROYANOSYVIRUS
← Voltar para CVEs

CVE-2024-39327

CRITICAL
9.9

Descricao

Incorrect Access Control vulnerability in Atos Eviden IDRA before 2.6.1 could allow the possibility to obtain CA signing in an illegitimate way.

Detalhes CVE

Pontuacao CVSS v3.19.9
SeveridadeCRITICAL
Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Vetor de ataqueNETWORK
ComplexidadeLOW
Privilegios necessariosLOW
Interacao do usuarioNONE
Publicado2/18/2025
Ultima modificacao3/17/2025
Fontenvd
Avistamentos honeypot0

Fraquezas (CWE)

CWE-284

Referencias

https://eviden.com/solutions/digital-security/digital-identity/(cve@mitre.org)
https://support.bull.com/ols/product/security/psirt/security-bulletins/potential-privilege-escalation-in-idpki-psirt-1335-tlp-clear-version-2-10-cve-2024-39327-cve-2024-39328-cve-2024-51505/view(cve@mitre.org)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.