Lucene search

PatchstackCVE-2024-33587

HistoryApr 29, 2024 - 1:15 p.m.

CVE-2024-33587

2024-04-2913:15:31

CWE-862

Patchstack

web.nvd.nist.gov

copy content protection

authorization

vulnerability

nvd

secure

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

AI Score

5.2

Confidence

High

EPSS

Percentile

9.0%

JSON

Missing Authorization vulnerability in Copy Content Protection Team Secure Copy Content Protection and Content Locking.This issue affects Secure Copy Content Protection and Content Locking: from n/a through 3.9.0.

Affected configurations

Vulners

Vulnrichment

Node

copy_content_protection_teamsecure_copy_content_protection_and_content_lockingRange≤3.9.0

VendorProductVersionCPE
copy_content_protection_teamsecure_copy_content_protection_and_content_locking*cpe:2.3:a:copy_content_protection_team:secure_copy_content_protection_and_content_locking:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
copy_content_protection_team	secure_copy_content_protection_and_content_locking	*	cpe:2.3:a:copy_content_protection_team:secure_copy_content_protection_and_content_locking::::::::

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "secure-copy-content-protection",
    "product": "Secure Copy Content Protection and Content Locking",
    "vendor": "Copy Content Protection Team",
    "versions": [
      {
        "changes": [
          {
            "at": "3.9.1",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "3.9.0",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/secure-copy-content-protection/wordpress-secure-copy-content-protection-and-content-locking-plugin-3-9-0-broken-access-control-vulnerability?_s_id=cve

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

AI Score

5.2

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2024-33587