CVE-2024-46897CWE-732

Incorrect permission assignment for critical resource issue exists in Exment v6.1.4 and earlier and Exment v5.0.11 and earlier

Low · published October 18, 2024

CVSS v3.0
3.8
EPSS
0%
Percentile
29.3
In the wild
Unconfirmed
What it is

Incorrect permission assignment for critical resource issue exists in Exment v6.1.4 and earlier and Exment v5.0.11 and earlier. A logged-in user with the permission of table management may obtain and/or alter the information of the unauthorized table.

The record
Technical detail
CVSS v3.0
3.8 · LOW
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00366 · 29.3th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2024-10-18T06:03Z
EPSS history
Timeline
  • 18 OCT 06:03Z
    Incorrect permission assignment for critical resource issue exists in Exment v6.1.4 and earlier and Exment v5.0.11 and earlier
    cvelistv5