How severe is CVE-2024-9970?

CVE-2024-9970 has a CVSS v3 score of 8.8 (HIGH).

CVE-2024-9970

Name: flowmaster_bpm_plus
Author: newtype

8.8HIGH

The FlowMaster BPM Plus system from NewType has a privilege escalation vulnerability. Remote attackers with regular privileges can elevate their privileges to administrator by tampering with a specifi

公開日: 10/15/2024更新日: 10/17/2024

説明

The FlowMaster BPM Plus system from NewType has a privilege escalation vulnerability. Remote attackers with regular privileges can elevate their privileges to administrator by tampering with a specific cookie.

AI分析AIによる分析

影響を受ける製品

newtypeflowmaster_bpm_plus

参照

https://www.twcert.org.tw/en/cp-139-8137-ea537-2.html
Third Party Advisory
https://www.twcert.org.tw/tw/cp-132-8136-4d5b4-1.html
Third Party Advisory