CVE-2024-46480CWE-522

An NTLM hash leak in Venki Supravizio BPM up to 18.0.1 allows authenticated attackers with Application Administrator access to escalate privileges on the…

High · published January 13, 2025

CVSS v3.1
8.4
EPSS
1%
Percentile
42.0
In the wild
Unconfirmed
What it is

An NTLM hash leak in Venki Supravizio BPM up to 18.0.1 allows authenticated attackers with Application Administrator access to escalate privileges on the underlying host system.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00500 · 42.0th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2025-01-13T00:00Z
EPSS history
Timeline
  • 13 JAN 00:00Z
    An NTLM hash leak in Venki Supravizio BPM up to 18.0.1 allows authenticated attackers with Application Administrator access to escalate privileges on the…
    cvelistv5