Products
UNKNOWN
Source
cve@mitre.org
Tags
CVE-2024-38446 details
Published : July 17, 2024, 5:15 p.m.
Last Modified : July 17, 2024, 5:15 p.m.
Last Modified : July 17, 2024, 5:15 p.m.
Description
NATO NCI ANET 3.4.1 mishandles report ownership. A user can create a report and, despite the restrictions imposed by the UI, change the author of that report to an arbitrary user (without their consent or knowledge) via a modified UUID in a POST request.
CVSS Score
| 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 |
|---|
Weakness
| Weakness | Name | Description |
|---|
References
| URL | Source |
|---|---|
| https://www.linkedin.com/pulse/idors-ncia-anet-v341-visionspace-technologies-hepxe | cve@mitre.org |
This website uses the NVD API, but is not approved or certified by it.