2 lines
1.6 KiB
JSON
2 lines
1.6 KiB
JSON
{"affected":[{"affectedData":[{"product":"changeweb/unifiedtransform","vendor":"changeweb","versions":[{"lessThanOrEqual":"latest","status":"affected","version":"unspecified","versionType":"custom"}]}],"source":"security@huntr.dev"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Due to a lack of access control, unauthorized users are able to view and modify information pertaining to other users."},{"lang":"es","value":"Debido a la falta de control de acceso, usuarios no autorizados pueden ver y modificar información perteneciente a otros usuarios."}],"id":"CVE-2024-2292","lastModified":"2026-06-17T07:24:15.363","metrics":{"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","version":"3.0"},"exploitabilityScore":2.8,"impactScore":4.2,"source":"security@huntr.dev","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-2292","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-03-20T17:51:40.709128Z","version":"2.0.3"}}]},"published":"2025-03-20T10:15:32.340","references":[{"source":"security@huntr.dev","url":"https://huntr.com/bounties/90a7299e-9233-43fd-b666-7375c4fdbb3c"}],"sourceIdentifier":"security@huntr.dev","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-862"}],"source":"security@huntr.dev","type":"Secondary"}]}
|