Description
Rapid7 Insight Platform versions between November 2019 and August 14, 2024 suffer from missing authorization issues whereby an attacker can intercept local requests to set the name and description of a new user group. This could potentially lead to an empty user group being added to the incorrect customer. This vulnerability is remediated as of August 14, 2024.
INFO
Published Date :
2024-09-09T15:02:38.681Z
Last Modified :
2024-09-09T17:12:45.623Z
Source :
rapid7
AFFECTED PRODUCTS
The following products are affected by CVE-2024-8042 vulnerability.
| Vendors | Products |
|---|---|
| Rapid7 |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2024-8042.
| URL | Resource |
|---|---|
| https://cwe.mitre.org/data/definitions/862.html |
|
CVSS Vulnerability Scoring System
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact