Today > 5 Critical | 7 High | 33 Medium vulnerabilities - You can now download lists of IOCs here!

CVE-2024-0122

Nov. 23, 2024, 12:15 a.m.

CVSS Score

7.6 / 10

Product(s) Impacted

NVIDIA Delegated Licensing Service

Description

NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker may cause an unauthorized action. A successful exploit of this vulnerability may lead to partial denial of service and confidential information disclosure.

Weaknesses

CWE-862

Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

CWE ID: 862

Date

Published: Nov. 23, 2024, 12:15 a.m.

Last Modified: Nov. 23, 2024, 12:15 a.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

psirt@nvidia.com

CVSS Data

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

Base Score

7.6

Exploitability Score

2.8

Impact Score

4.7

Base Severity