CVE Vulnerabilities

CVE-2024-3057

Improper Privilege Management

Published: Oct 08, 2024 | Modified: Oct 08, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

A flaw exists whereby a user can make a specific call to a FlashArray endpoint allowing privilege escalation.

Weakness

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Potential Mitigations

References