Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP

15 - 15.83

16 - 16.14

17 - 17.1

Source

cvd@cert.pl

CVE-2024-7265 details

Published : Aug. 7, 2024, 11:15 a.m.
Last Modified : Aug. 7, 2024, 3:17 p.m.

Description

Incorrect User Management vulnerability in Naukowa i Akademicka Sie? Komputerowa - Pa?stwowy Instytut Badawczy EZD RP allows logged-in user to change the password of any user, including root user, which could lead to privilege escalation. This issue affects EZD RP: from 15 before 15.84, from 16 before 16.15, from 17 before 17.2.

CVSS Score

1	2	3	4	5	6	7	8	9	10

Weakness

Weakness	Name	Description
CWE-286	Incorrect User Management	The product does not properly manage a user within its environment.

References

URL	Source
https://cert.pl/en/posts/2024/08/CVE-2023-7265/	cvd@cert.pl
https://cert.pl/posts/2024/08/CVE-2023-7265/	cvd@cert.pl
https://www.gov.pl/web/ezd-rp	cvd@cert.pl

This website uses the NVD API, but is not approved or certified by it.

CVE-2024-7265