ID CVE-2024-37282
Summary It was identified that under certain specific preconditions, an API key that was originally created with a specific privileges could be subsequently used to create new API keys that have elevated privileges.
References
Vulnerable Configurations
CVSS
Base: None
Impact:
Exploitability:
Access
VectorComplexityAuthentication
Impact
ConfidentialityIntegrityAvailability
Last major update 28-06-2024 - 10:27
Published 28-06-2024 - 05:15
Last modified 28-06-2024 - 10:27
Back to Top