Search criteria

Related vulnerabilities

CVE-2024-26139 (GCVE-0-2024-26139)

Vulnerability from cvelistv5 – Published: 2024-05-23 11:47 – Updated: 2024-08-01 23:59
VLAI
Title
OpenCTI Authenticated Privilege Escalation
Summary
OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. Due to lack of certain security controls on the profile edit functionality, an authenticated attacker with low privileges can gain administrative privileges on the web application.
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
  • CWE-284 - Improper Access Control
  • CWE-657 - Violation of Secure Design Principles
Assigner
References
Impacted products
Vendor Product Version
OpenCTI-Platform opencti Affected: <= 5.12.31
Create a notification for this product.
opencti-platform opencti Affected: 0 , ≤ 5.12.31 (custom)
    cpe:2.3:a:opencti-platform:opencti:-:*:*:*:*:*:*:*
Create a notification for this product.
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:opencti-platform:opencti:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "opencti",
            "vendor": "opencti-platform",
            "versions": [
              {
                "lessThanOrEqual": "5.12.31",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-26139",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-23T16:54:23.549911Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:48:57.357Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T23:59:32.541Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-qx4j-f4f2-vjw9",
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-qx4j-f4f2-vjw9"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "opencti",
          "vendor": "OpenCTI-Platform",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c= 5.12.31"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. Due to lack of certain security controls on the profile edit functionality, an authenticated attacker with low privileges can gain administrative privileges on the web application. "
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-284",
              "description": "CWE-284: Improper Access Control",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-657",
              "description": "CWE-657: Violation of Secure Design Principles",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-05-23T11:47:44.488Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-qx4j-f4f2-vjw9",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-qx4j-f4f2-vjw9"
        }
      ],
      "source": {
        "advisory": "GHSA-qx4j-f4f2-vjw9",
        "discovery": "UNKNOWN"
      },
      "title": "OpenCTI Authenticated Privilege Escalation"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2024-26139",
    "datePublished": "2024-05-23T11:47:44.488Z",
    "dateReserved": "2024-02-14T17:40:03.688Z",
    "dateUpdated": "2024-08-01T23:59:32.541Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

PYSEC-2024-296

Vulnerability from pysec - Published: 2024-05-23 12:15 - Updated: 2026-05-20 09:19
VLAI
Details

OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. Due to lack of certain security controls on the profile edit functionality, an authenticated attacker with low privileges can gain administrative privileges on the web application.

Impacted products
Name purl
pycti pkg:pypi/pycti

{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "pycti",
        "purl": "pkg:pypi/pycti"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.12.32"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.2.1",
        "1.2.11",
        "1.2.12",
        "1.2.13",
        "1.2.14",
        "1.2.15",
        "1.2.2",
        "1.2.4",
        "1.2.9",
        "2.0.0",
        "2.0.1",
        "2.0.2",
        "2.0.3",
        "2.1.10",
        "2.1.11",
        "2.1.12",
        "2.1.13",
        "2.1.3",
        "2.1.4",
        "2.1.5",
        "2.1.6",
        "2.1.7",
        "2.1.8",
        "2.1.9",
        "3.0.0",
        "3.0.1",
        "3.0.2",
        "3.0.3",
        "3.1.0",
        "3.1.1",
        "3.1.2",
        "3.2.0",
        "3.2.1",
        "3.2.2",
        "3.2.3",
        "3.2.4",
        "3.2.5",
        "3.2.6",
        "3.2.7",
        "3.3.0",
        "3.3.1",
        "3.3.2",
        "3.3.3",
        "4.0.0",
        "4.0.1",
        "4.0.2",
        "4.0.3",
        "4.0.4",
        "4.0.5",
        "4.0.6",
        "4.0.7",
        "4.1.0",
        "4.1.1",
        "4.1.2",
        "4.2.1",
        "4.2.2",
        "4.2.3",
        "4.2.4",
        "4.3.0",
        "4.3.1",
        "4.3.2",
        "4.3.3",
        "4.3.4",
        "4.3.5",
        "4.4.0",
        "4.4.1",
        "4.4.2",
        "4.4.3",
        "4.5.0",
        "4.5.1",
        "4.5.2",
        "4.5.3",
        "4.5.4",
        "4.5.5",
        "5.0.0",
        "5.0.1",
        "5.0.2",
        "5.0.3",
        "5.1.0",
        "5.1.1",
        "5.1.2",
        "5.1.3",
        "5.1.4",
        "5.10.0",
        "5.10.1",
        "5.10.2",
        "5.10.3",
        "5.11.0",
        "5.11.1",
        "5.11.10",
        "5.11.11",
        "5.11.12",
        "5.11.13",
        "5.11.14",
        "5.11.2",
        "5.11.3",
        "5.11.4",
        "5.11.5",
        "5.11.6",
        "5.11.7",
        "5.11.8",
        "5.11.9",
        "5.12.0",
        "5.12.1",
        "5.12.10",
        "5.12.11",
        "5.12.12",
        "5.12.13",
        "5.12.14",
        "5.12.15",
        "5.12.16",
        "5.12.17",
        "5.12.18",
        "5.12.19",
        "5.12.2",
        "5.12.20",
        "5.12.21",
        "5.12.22",
        "5.12.23",
        "5.12.24",
        "5.12.25",
        "5.12.26",
        "5.12.27",
        "5.12.28",
        "5.12.29",
        "5.12.3",
        "5.12.30",
        "5.12.31",
        "5.12.4",
        "5.12.5",
        "5.12.6",
        "5.12.7",
        "5.12.8",
        "5.12.9",
        "5.2.0",
        "5.2.1",
        "5.2.2",
        "5.2.3",
        "5.2.4",
        "5.3.0",
        "5.3.1",
        "5.3.10",
        "5.3.11",
        "5.3.12",
        "5.3.13",
        "5.3.14",
        "5.3.15",
        "5.3.16",
        "5.3.17",
        "5.3.2",
        "5.3.3",
        "5.3.4",
        "5.3.5",
        "5.3.6",
        "5.3.7",
        "5.3.8",
        "5.3.9",
        "5.3.post5310",
        "5.3.post5311",
        "5.3.post5312",
        "5.3.post5314",
        "5.3.post5315",
        "5.3.post5316",
        "5.3.post5317",
        "5.3.post5318",
        "5.4.0",
        "5.4.1",
        "5.5.0",
        "5.5.1",
        "5.5.2",
        "5.5.3",
        "5.5.4",
        "5.5.5",
        "5.5.6",
        "5.5.post551",
        "5.5.post552",
        "5.5.post553",
        "5.5.post554",
        "5.5.post555",
        "5.5.post556",
        "5.6.0",
        "5.6.1",
        "5.6.2",
        "5.6.post560",
        "5.6.post561",
        "5.6.post562",
        "5.7.0",
        "5.7.1",
        "5.7.2",
        "5.7.3",
        "5.7.4",
        "5.7.5",
        "5.7.6",
        "5.7.post570",
        "5.7.post571",
        "5.7.post572",
        "5.7.post573",
        "5.7.post574",
        "5.7.post575",
        "5.7.post576",
        "5.8.0",
        "5.8.1",
        "5.8.2",
        "5.8.3",
        "5.8.4",
        "5.8.5",
        "5.8.6",
        "5.8.7",
        "5.9.0",
        "5.9.1",
        "5.9.2",
        "5.9.3",
        "5.9.4",
        "5.9.5",
        "5.9.6"
      ]
    }
  ],
  "aliases": [
    "CVE-2024-26139",
    "GHSA-qx4j-f4f2-vjw9"
  ],
  "details": "OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. Due to lack of certain security controls on the profile edit functionality, an authenticated attacker with low privileges can gain administrative privileges on the web application. ",
  "id": "PYSEC-2024-296",
  "modified": "2026-05-20T09:19:13.967252Z",
  "published": "2024-05-23T12:15:09.530Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-qx4j-f4f2-vjw9"
    }
  ],
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
      "type": "CVSS_V3"
    }
  ]
}