CVE-2024-6908: Admin Can Escalate Privileges to SuperAdmin Using Manual PUT Request
Improper privilege management in Yugabyte Platform allows authenticated admin users to escalate privileges to SuperAdmin via a crafted PUT HTTP request, potentially leading to unauthorized access to sensitive system functions and data.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6908?
CVE-2024-6908 is considered a high severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2024-6908?
To fix CVE-2024-6908, upgrade to the latest version of Yugabyte Platform that includes the security patch for this vulnerability.
Who is affected by CVE-2024-6908?
CVE-2024-6908 affects authenticated admin users of the Yugabyte Platform who can exploit improper privilege management.
What could an attacker do with CVE-2024-6908?
An attacker could escalate their privileges to SuperAdmin and gain unauthorized access to sensitive functions and data in the system.
When was CVE-2024-6908 disclosed?
CVE-2024-6908 was disclosed in 2024 as a significant security vulnerability in the Yugabyte Platform.