CVE-2024-52359

HIGH Year: 2024
CVSS v3 Score
8.8
High
Weakness Type
CWE-286
View all →

Vulnerability Description

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, and 1.0.2.1 could allow an authenticated user to perform unauthorized actions that should be reserved to administrator used due to improper access controls.

Related Vulnerabilities

CVE-2021-21553

HIGH
CVSS:8.8(High)

Dell PowerScale OneFS versions 8.1.0-9.1.0 contain an Incorrect User Management vulnerability.under some specific conditions, this can allow the CompAdmin user to elevate privileges and break out of C...

CWE-2862021

CVE-2023-3907

HIGH
CVSS:8.8(High)

A privilege escalation vulnerability in GitLab EE affecting all versions from 16.0 prior to 16.4.4, 16.5 prior to 16.5.4, and 16.6 prior to 16.6.2 allows a project Maintainer to use a Project Access T...

CWE-2862023

CVE-2024-48853

CRITICAL
CVSS:9.0(Critical)

An escalation of privilege vulnerability in ASPECT could provide an attacker root access to a server when logged in as a "non" root ASPECT user. This issue affects ASPECT-Enterprise: through 3.08.03; ...

CWE-2862024

CVE-2024-28020

HIGH
CVSS:8.0(High)

A user/password reuse vulnerability exists in the FOXMAN-UN/UNEM application and server management. If exploited a malicious high-privileged user could use the passwords and login information through ...

CWE-2862024

CVE-2022-32260

CRITICAL
CVSS:9.8(Critical)

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application creates temporary user credentials for UMC (User Management Component) users. An...

CWE-2862022

CVE-2023-26689

CRITICAL
CVSS:9.8(Critical)

An issue discovered in CS-Cart MultiVendor 4.16.1 allows attackers to alter arbitrary user account profiles via crafted post request.

CWE-2862023