How severe is CVE-2024-26302?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 4.8 out of 10.

What type of vulnerability is CVE-2024-26302?

This is classified as CWE-276, which is a common weakness in software security.

CVE-2024-26302 - MEDIUM Severity | CVSS 4.8

Vulnerability Description

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager.

Related Vulnerabilities

CVE-2024-26280

MEDIUM

CVSS:4.7(Medium)

Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated Ops and Viewers users to view all information on audit logs, including dag names and usernames they were not permit...

CWE-2762024

CVE-2018-9085

MEDIUM

CVSS:4.9(Medium)

A write protection lock bit was left unset after boot on an older generation of Lenovo and IBM System x servers, potentially allowing an attacker with administrator access to modify the subset of flas...

CWE-2762018

CVE-2020-24402

MEDIUM

CVSS:4.9(Medium)

Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability in the Integrations component. This vulnerability could be abused by authenticated users with per...

CWE-2762020

CVE-2023-45690

MEDIUM

CVSS:4.9(Medium)

Default file permissions on South River Technologies' Titan MFT and Titan SFTP servers on Linux allows a user that's authentication to the OS to read sensitive files on the filesystem

CWE-2762023

CVE-2013-4763

MEDIUM

CVSS:4.6(Medium)

Samsung Galaxy S3/S4 exposes an unprotected component allowing arbitrary SMS text messages without requesting permission.

CWE-2762013

CVE-2021-3722

MEDIUM

CVSS:5.0(Medium)

A denial of service vulnerability was reported in Lenovo PCManager prior to version 4.0.40.2175 that could allow configuration files to be written to non-standard locations during installation.

CWE-2762021