CVE-2024-4811 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	2.2 LOW	NETWORK	HIGH	HIGH	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N
Octopus	CNA	2.2 LOW	NETWORK	HIGH	HIGH	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N
CISA-ADP	ADP	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 23%

Vendor	Product	Version
octopus	octopus_server	2023.1.4189 ≤ 𝑥 < 2023.4.8608
octopus	octopus_server	2024.1.437 ≤ 𝑥 < 2024.1.12759
octopus	octopus_server	2024.2.101 ≤ 𝑥 < 2024.2.9193

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-863 - Incorrect Authorization
The software performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References

https://advisories.octopus.com/post/2024/sa2024-05/

https://advisories.octopus.com/post/2024/sa2024-05/