CVE-2024-36539

CRITICAL Year: 2024
CVSS v3 Score
9.8
Critical
Weakness Type
CWE-277
View all →

Vulnerability Description

Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.

Related Vulnerabilities

CVE-2024-36540

CRITICAL
CVSS:9.8(Critical)

Insecure permissions in external-secrets v0.9.16 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.

CWE-2772024

CVE-2023-27842

HIGH
CVSS:8.8(High)

Insecure Permissions vulnerability found in Extplorer File manager eXtplorer v.2.1.15 allows a remote attacker to execute arbitrary code via the index.php compenent

CWE-2772023

CVE-2024-36542

HIGH
CVSS:8.8(High)

Insecure permissions in kuma v2.7.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.

CWE-2772024

CVE-2024-6605

HIGH
CVSS:8.8(High)

Firefox Android allowed immediate interaction with permission prompts. This could be used for tapjacking. This vulnerability affects Firefox < 128.

CWE-2772024

CVE-2024-29417

HIGH
CVSS:8.4(High)

Insecure Permissions vulnerability in e-trust Horacius 1.0, 1.1, and 1.2 allows a local attacker to escalate privileges via the password reset function.

CWE-2772024

CVE-2024-34329

HIGH
CVSS:8.4(High)

Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.5 and earlier without the dxp1-patch-E24-004 patch allows unauthenticated attackers to execute arbitrary code as SYSTEM via a crafted...

CWE-2772024