CVE-2024-39327

Summary

CVE-2024-39327 is an Access Control vulnerability affecting Atos Eviden IDRA versions prior to 2.6.1. This issue grants unauthorized users the capability to gain CA signing privileges, potentially leading to serious security breaches and unauthorized certificate issuance. The incorrect access control mechanism in IDRA allows this manipulation, posing a significant risk for organizations relying on the software for certificate management and authentication. It is highly recommended to upgrade to the latest version as soon as possible to mitigate these risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.