CVE-2024-45276

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An unauthenticated remote attacker can get read access to files in the "/tmp" directory due to missing authentication.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-306

Affected software

No affected versions have been published.

Timeline

Published
Oct 15, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-452774.3The SAP HANA Node.js client package versions from 2.0.0 before 2.21.31 is impacted by Prototype Pollution vulnerability allowing an attackerCVE-2024-452785.4SAP Commerce Backoffice does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. After suCVE-2024-452796.1Due to insufficient input validation, CRM Blueprint Application Builder Panel of SAP NetWeaver Application Server for ABAP allows an unautheCVE-2024-45284.8A vulnerability was found in SourceCodester Prison Management System 1.0. It has been declared as problematic. Affected by this vulnerabilitCVE-2024-452804.8Due to insufficient encoding of user-controlled inputs, SAP NetWeaver AS Java allows malicious scripts to be executed in the login applicatiCVE-2024-452815.8SAP BusinessObjects Business Intelligence Platform allows a high privilege user to run client desktop applications even if some of the DLLs CVE-2024-452825.3Fields which are in 'read only' state in Bank Statement Draft in Manage Bank Statements application, could be modified by MERGE method. The CVE-2024-452836.0SAP NetWeaver AS for Java allows an authorized attacker to obtain sensitive information. The attacker could obtain the username and passwordCVE-2024-452842.4An authenticated attacker with high privilege can use functions of SLCM transactions to which access should be restricted. This may result iCVE-2024-452855.4The RFC enabled function module allows a low privileged user to perform denial of service on any user and also change or delete favourite noCVE-2024-452866.5Due to lack of proper authorization checks when calling user, a function module in obsolete Tobin interface in SAP Production and Revenue AcCVE-2024-452877.5A malicious value of size in a structure of packed libnv can cause an integer overflow, leading to the allocation of a smaller buffer than r
CVE-2024-45276: High severity, CVSS 7.5 | Vulnix