CVE-2024-5812

LowCVSS 2.7/10Last modified Jun 17, 2026

Description

A low severity vulnerability in BIPS has been identified where an attacker with high privileges or a compromised high privilege account can overwrite Read-Only smart rules via a specially crafted API request.

Metrics

CVSS 3.1 2.7/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-290

Affected software

No affected versions have been published.

Timeline

Published: Jun 11, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-581249.1Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity CVE-2024-581259.1Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity CVE-2024-581269.1Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity CVE-2024-581279.1Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity CVE-2024-581284.8In MISP before 2.4.193, menu_custom_right_link parameters can be set via the UI (i.e., without using the CLI) and thus attackers with admin CVE-2024-581294.8In MISP before 2.4.193, menu_custom_right_link_html parameters can be set via the UI (i.e., without using the CLI) and thus attackers with a CVE-2024-58134.9A medium severity vulnerability in BIPS has been identified where an authenticated attacker with high privileges can access the SSH private CVE-2024-581306.1In app/Controller/Component/RestResponseComponent.php in MISP before 2.4.193, REST endpoints have a lack of sanitization for non-JSON respon CVE-2024-581313.7FISCO BCOS 3.11.0 has an issue with synchronization of the transaction pool that can, for example, be observed when a malicious node (that h CVE-2024-581324.0In chainmaker-go (aka ChainMaker) before 2.3.6, multiple updates to a single node's configuration can cause other normal nodes to perform co CVE-2024-581334.0In chainmaker-go (aka ChainMaker) before 2.4.0, when making frequent updates to a node's configuration file and restarting this node, concur CVE-2024-581348.1Mojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as an HMAC session cookie secret by d