CVE-2024-6727

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A flaw in versions of Delphix Data Control Tower (DCT) prior to 19.0.0 results in broken authentication through the enable-scale-testing functionality of the application.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published: Jul 29, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-67289.8A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been classified as critical. This affects an unknown part CVE-2024-67298.8A vulnerability was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. It has been declared as critical. This vulner CVE-2024-67306.3A vulnerability was found in Nanjing Xingyuantu Technology SparkShop up to 1.1.6. It has been rated as critical. This issue affects some unk CVE-2024-67318.8A vulnerability classified as critical has been found in SourceCodester Student Study Center Desk Management System 1.0. This affects an unk CVE-2024-67328.8A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. This vulnerability affec CVE-2024-67338.8A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. Affected by this issue is some unknown CVE-2024-67348.8A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been classified as critical. This affects an unknown part CVE-2024-67358.8A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been declared as critical. This vulnerability affects unkn CVE-2024-67368.8A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been rated as critical. This issue aff CVE-2024-67378.8The access control in the Electronic Official Document Management System from 2100 TECHNOLOGY is not properly implemented, allowing remote CVE-2024-67385.3The tumbnail API of Tronclass from WisdomGarden lacks proper access control, allowing unauthenticated remote attackers to obtain certain spe CVE-2024-67396.1The session cookie in MailGates and MailAudit from Openfind does not have the HttpOnly flag enabled, allowing remote attackers to potentiall