CVE-2024-36068

An incorrect access control vulnerability in Rubrik CDM versions prior to 9.1.2-p1, 9.0.3-p6 and 8.1.3-p12, allows an attacker with network access to execute…

High · published August 27, 2024

CVSS v3.1
7.5
EPSS
0%
Percentile
41.0
In the wild
Unconfirmed
What it is

⚡ A single misconfigured setting could let attackers run arbitrary code on your Rubrik CDM setup! 🚨 Picture a restaurant where anyone can walk into the kitchen and cook whatever they want — that’s the level of access this vulnerability gives! If the chef doesn't lock the door, chaos can ensue in the dining area. An attacker with network access could slip in unnoticed, executing malicious code that may lead to unauthorized data access, system manipulation, or even complete service disruption. This isn't just a minor hiccup; we're talking about a potentially disastrous breach that could affect all your data management operations.

Put simply

Picture a restaurant where anyone can walk into the kitchen and cook whatever they want — that’s the level of access this vulnerability gives! If the chef doesn't lock the door, chaos can ensue in the dining area. This incorrect access control vulnerability in Rubrik CDM prior to versions 9.1.2-p1, 9.0.3-p6, and 8.1.3-p12 allows attackers to execute arbitrary code due to a lack of proper validation in network access permissions.

What to do

An attacker with network access could slip in unnoticed, executing malicious code that may lead to unauthorized data access, system manipulation, or even complete service disruption. This isn't just a minor hiccup; we're talking about a potentially disastrous breach that could affect all your data management operations. Update Rubrik CDM to at least version 9.1.2-p1, 9.0.3-p6, or 8.1.3-p12 immediately. Review your access controls and ensure only trusted users have network access. Conduct a security audit to identify any risky configurations. You've got this! With these steps, you’ll enhance your defenses and keep your data safe! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00487 · 41.0th percentile
Published
2024-08-27T00:00Z
EPSS history
Timeline
  • 27 AUG 00:00Z
    An incorrect access control vulnerability in Rubrik CDM versions prior to 9.1.2-p1, 9.0.3-p6 and 8.1.3-p12, allows an attacker with network access to execute…
    cvelistv5