CVE-2024-45844

HIGH Year: 2024
CVSS v3 Score
7.2
High
Weakness Type
CWE-306
View all →

Vulnerability Description

BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdown settings. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Related Vulnerabilities

CVE-2020-7389

HIGH
CVSS:7.2(High)

Sage X3 System CHAINE Variable Script Command Injection. An authenticated user with developer access can pass OS commands via this variable used by the web application. Note, this developer configurat...

CWE-3062020

CVE-2021-30462

HIGH
CVSS:7.2(High)

VestaCP through 0.9.8-24 allows the admin user to escalate privileges to root because the Sudo configuration does not require a password to run /usr/local/vesta/bin scripts.

CWE-3062021

CVE-2021-44255

HIGH
CVSS:7.2(High)

Authenticated remote code execution in MotionEye <= 0.42.1 and MotioneEyeOS <= 20200606 allows a remote attacker to upload a configuration backup file containing a malicious python pickle file which w...

CWE-3062021

CVE-2024-31525

HIGH
CVSS:7.2(High)

Peppermint Ticket Management 0.4.6 is vulnerable to Incorrect Access Control. A regular registered user is able to elevate his privileges to admin and gain complete access to the system as the authori...

CWE-3062024

CVE-2022-35865

HIGH
CVSS:7.3(High)

This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It! 20.21.2.109. Authentication is not required to exploit this vulnerability. The specific ...

CWE-3062022

CVE-2022-43989

HIGH
CVSS:7.3(High)

Password recovery vulnerability in SICK SIM2x00 (ARM) Partnumber 1092673 and 1081902 with firmware version < 1.2.0 allows an unprivileged remote attacker to gain access to the userlevel defined as Rec...

CWE-3062022