CVE-2024-7265 — Privilege Escalation in EZD RP
Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to change the password of any user, i…
Published: 2024-08-07 · CVSS: 8.7 · CVSS 4.0
Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to change the password of any user, including root user, which could lead to privilege escalation. This issue affects EZD RP: from 15 before 15.84, from 16 before 16.15, from 17 before 17.2.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7