CVE-2024-52442
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Nov 20, 2024
Updated: Nov 21, 2024
CWE ID 266
Summary
CVE-2024-52442 is an Incorrect Privilege Assignment vulnerability affecting UserPlus, a user management software. The flaw enables Privilege Escalation, allowing unauthorized users to gain higher access levels than intended. This vulnerability impacts all versions of UserPlus from n/a through 2.0. Successful exploitation could lead to serious security consequences, potentially compromising entire systems. It is essential for organizations using UserPlus to apply the necessary patches as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.