CVE-2024-0046

Summary

CVE-2024-0046 is a newly discovered vulnerability affecting the InstallPackageHelper.java component in a specific software. This issue involves a logic error in the installExistingPackageAsUser function, which could potentially bypass carrier restrictions. Consequently, an attacker may escalate their privileges locally without requiring any additional execution privileges or user interaction. This vulnerability poses a significant risk, particularly in enterprise environments, and should be addressed promptly through available patches or workarounds.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.