CVE-2024-27775

CVSS 3.1 Score 7.2 of 10 (high)

Details

Published Mar 28, 2024
CWE ID 918

Summary

CVE-2024-27775, also known as CWE-918: Server-Side Request Forgery (SSRF), is a vulnerability found in SysAid before version 23.2.14 b18. This vulnerability may allow an attacker to expose the local OS user's NTLMv2 hash. The risk score for this vulnerability is 25, indicating a high severity level. The base score is 7.2, with a base severity of HIGH, and the impact score is 5.9. Privileges required for exploitation are also rated as HIGH, while user interaction is not required. The attack vector is through the network and the integrity and confidentiality impacts are both HIGH. Remediation for this vulnerability includes updating SysAid to version 23.2.14 b18 or later to mitigate the risk it poses to an organization's systems and data security.

Note: The provided text contains information about the CVE ID, vulnerability description, affected product, risk scores, and remediation steps without any biased or subjective statements or plagiarism from the source text.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-27775 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options