CVE Vulnerabilities

CVE-2024-3325

Improper Privilege Management

Published: Jul 10, 2024 | Modified: Oct 14, 2025
CVSS 3.x
7.2
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
LOW

Vulnerability in Jaspersoft JasperReport Servers.This issue affects JasperReport Servers: from 8.0.4 through 9.0.0.

Weakness

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected Software

Name Vendor Start Version End Version
Jasperreports_server Cloud * 8.0.4 (including)
Jasperreports_server Cloud 8.2.0 (including) 8.2.0 (including)
Jasperreports_server Cloud 9.0.0 (including) 9.0.0 (including)

Potential Mitigations

References