CVE-2024-23537

CWE-269 — Improper Privilege Management3 documents3 sources

Severity

8.8HIGH

EPSS

0.1%

top 73.04%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Apache Software Foundation Apache Fineract Apache Fineract

Timeline

PublishedMar 29

Description

Improper Privilege Management vulnerability in Apache Fineract.This issue affects Apache Fineract: <1.8.5. Users are recommended to upgrade to version 1.9.0, which fixes the issue.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:LExploitability: 1.8 | Impact: 6.0

Affected Packages2 packages

▶NVDapache/fineract< 1.9.0

▶CVEListV5apache_software_foundation/apache_fineract< 1.9.0

🔴Vulnerability Details

GHSA

GHSA-xcvp-xvv5-6298: Improper Privilege Management vulnerability in Apache Fineract↗2024-03-29

▶

CVEList

Apache Fineract: Under certain circumstances, this vulnerability allowed users, without specific permissions, to escalate their privileges to any role.↗2024-03-29

▶