CVE-2024-27605: High severity alldata vulnerability
Published Apr 2, 2024
·Updated
Alldata V0.4.6 is vulnerable to Insecure Permissions. Using users (test) can query information about the users in the system.
Affected Software
2 affected components
Alldata Alldata
Alldata Alldata=0.4.6
Event History
Apr 2, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-27605?
CVE-2024-27605 is classified as a medium-severity vulnerability due to its potential impact on user data security.
2
How do I fix CVE-2024-27605?
To fix CVE-2024-27605, ensure that strict permissions are applied to user accounts, limiting queries to authorized users only.
3
Who is affected by CVE-2024-27605?
The vulnerability affects users of Alldata version 0.4.6.
4
What kind of information can be exposed due to CVE-2024-27605?
CVE-2024-27605 allows unauthorized users to query sensitive information about system users.
5
When was CVE-2024-27605 published?
CVE-2024-27605 was published in the year 2024.