Skip to content
OpenAdvisories
High · 7.7 CVE-2024-3507 EUVD-2024-32093GHSA-p3gf-2fvj-hmp2

Privilege escalation vulnerability in Lunar

Published May 8, 2024 · Updated Aug 1, 2024 · Assigned by INCIBE

Description

Improper privilege management vulnerability in Lunar software that affects versions 6.0.2 through 6.6.0. This vulnerability allows an attacker to perform a secondary process injection into the Lunar application and abuse those rights to access sensitive user information.

Affected products

VendorProductAffectedFixed
Lunar Lunar 6.0.2 – < 6.6.0 6.6.0

References