CVE-2024-37346CWE-20

Insufficient input validation vulnerability in the Absolute Secure Access Warehouse prior to 13.06

Medium · published June 20, 2024

CVSS v3.1
4.9
EPSS
0%
Percentile
33.1
In the wild
Unconfirmed
What it is

There is an insufficient input validation vulnerability in

the Warehouse component of Absolute Secure Access prior to 13.06. Attackers

with system administrator permissions can impair the availability of certain

elements of the Secure Access administrative UI by writing invalid data to the

warehouse over the network. There is no loss of warehouse integrity or

confidentiality, the security scope is unchanged. Loss of availability is high.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00400 · 33.1th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2024-06-20T16:51Z
EPSS history
Timeline
  • 20 JUN 16:51Z
    Insufficient input validation vulnerability in the Absolute Secure Access Warehouse prior to 13.06
    cvelistv5