Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2024-7265

Privilege Escalation in EZD RP

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERT-PL

Description

Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to change the password of any user, including root user, which could lead to privilege escalation. This issue affects EZD RP: from 15 before 15.84, from 16 before 16.15, from 17 before 17.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP

Default version status: unaffected

  • 15 to < 15.84affected
  • 16 to < 16.15affected
  • 17 to < 17.2affected

References