CVE-2024-52442

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Nov 20, 2024
Updated: Nov 21, 2024
CWE ID 266

Summary

CVE-2024-52442 is a newly discovered Privilege Escalation vulnerability affecting Userplus's UserPlus software versions 1.0 through 2.0. The flaw stems from an Incorrect Privilege Assignment issue, which enables attackers to escalate their privileges, potentially gaining unauthorized access to sensitive data or making unintended modifications. This vulnerability poses a significant risk to organizations utilizing UserPlus software and requires immediate attention and patching to mitigate the threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share