CVE-2024-51505

HighCVSS 8.0/10Last modified Jun 17, 2026

Description

An issue was discovered in Atos Eviden IDRA before 2.7.1. A highly trusted role (Config Admin) could leverage a race condition to escalate privileges.

Metrics

CVSS 3.1 8.0/10CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-362

Affected software

No affected versions have been published.

Timeline

Published: Feb 18, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-515064.8Tiki through 27.0 allows users who have certain permissions to insert a "Create a Wiki Pages" stored XSS payload in the description.CVE-2024-515074.8Tiki through 27.0 allows users who have certain permissions to insert a "Create/Edit External Wiki" stored XSS payload in the Name.CVE-2024-515084.8Tiki through 27.0 allows users who have certain permissions to insert a "Create/Edit External Wiki" stored XSS payload in the Index.CVE-2024-515094.8Tiki through 27.0 allows users who have certain permissions to insert a "Modules" (aka tiki-admin_modules.php) stored XSS payload in the Nam CVE-2024-51517.1The SULly WordPress plugin before 4.3.1 does not sanitise and escape some of its settings, which could allow high privilege users such as ad CVE-2024-515105.5Out-of-bounds access vulnerability in the logo module Impact: Successful exploitation of this vulnerability may affect service confidentiali CVE-2024-515115.5Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulnerability may affect CVE-2024-515125.5Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulnerability may affect CVE-2024-515135.5Vulnerability of processes not being fully terminated in the VPN module Impact: Successful exploitation of this vulnerability will affect po CVE-2024-515145.5Vulnerability of pop-up windows belonging to no app in the VPN module Impact: Successful exploitation of this vulnerability may affect serv CVE-2024-515154.7Race condition vulnerability in the kernel network module Impact:Successful exploitation of this vulnerability may affect availability.CVE-2024-515165.5Permission control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause features to function