Lucene search

INCDCVE-2024-36396

HistoryJun 13, 2024 - 1:15 p.m.

CVE-2024-36396

2024-06-1313:15:50

CWE-434

INCD

web.nvd.nist.gov

verint

unrestricted upload

file dangerous type

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

19.9%

JSON

Verint - CWE-434: Unrestricted Upload of File with Dangerous Type

Affected configurations

Nvd

Node

verintworkforce_optimizationRange<15.2.1030

VendorProductVersionCPE
verintworkforce_optimization*cpe:2.3:a:verint:workforce_optimization:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
verint	workforce_optimization	*	cpe:2.3:a:verint:workforce_optimization::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "WFO",
    "vendor": "Verint",
    "versions": [
      {
        "lessThan": "Upgrade to version 15.2.1030 or greater.",
        "status": "affected",
        "version": "All versions",
        "versionType": "custom"
      }
    ]
  }
]

References

www.gov.il/en/Departments/faq/cve_advisories

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

19.9%

JSON

Related for CVE-2024-36396