CVE-2024-38482CWE-703

CloudLink, versions 7.1.x and 8.x, contain an Improper check or handling of Exceptional Conditions Vulnerability in Cluster Component

Medium · published August 2, 2024

CVSS v3.1
6.6
EPSS
0%
Percentile
29.9
In the wild
Unconfirmed
What it is

CloudLink, versions 7.1.x and 8.x, contain an Improper check or handling of Exceptional Conditions Vulnerability in Cluster Component. A highly privileged malicious user with remote access could potentially exploit this vulnerability, leading to execute unauthorized actions and retrieve sensitive information from the database.

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00372 · 29.9th percentile
Weakness
CWE-703 · Improper Check or Handling of Exceptional Conditions
Published
2024-08-02T04:12Z
EPSS history
Timeline
  • 02 AUG 04:12Z
    CloudLink, versions 7.1.x and 8.x, contain an Improper check or handling of Exceptional Conditions Vulnerability in Cluster Component
    cvelistv5