CVE-2024-42021

An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials

High · published September 7, 2024

CVSS v3.0
7.5
EPSS
0%
Percentile
21.4
In the wild
Unconfirmed
What it is

An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00299 · 21.4th percentile
Published
2024-09-07T16:11Z
EPSS history
Timeline
  • 07 SEP 16:11Z
    An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials
    cvelistv5