CVE-2024-42464: Leak of user information
Published Aug 16, 2024
·Updated
Authorization Bypass Through User-Controlled Key vulnerability in upKeeper Solutions product upKeeper Manager allows Utilizing REST's Trust in the System Resource to Obtain Sensitive Data.This issue affects upKeeper Manager: through 5.1.9.
Affected Software
1 affected component
upKeeper upKeeper Manager<5.1.10
Event History
Aug 16, 2024
CVE Published
via MITRE·01:25 PM
Data Sourced
via MITRE·01:25 PM
DescriptionWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-42464?
CVE-2024-42464 is classified as a medium severity vulnerability due to its potential for unauthorized access to sensitive data.
2
How do I fix CVE-2024-42464?
To fix CVE-2024-42464, upgrade to upKeeper Manager version 5.1.10 or later.
3
What type of vulnerability is CVE-2024-42464?
CVE-2024-42464 is an Authorization Bypass Through User-Controlled Key vulnerability.
4
Which products are affected by CVE-2024-42464?
CVE-2024-42464 affects upKeeper Manager versions prior to 5.1.10.
5
What are the potential impacts of CVE-2024-42464?
The potential impacts of CVE-2024-42464 include unauthorized access to sensitive user information.