High · 8.8 CVE-2024-38291 EUVD-2024-53959GHSA-g4v7-6h28-6phm

In XIQ-SE before 24.2.11, a low-privileged user may be able to access admin passwords, which could lead to privilege escalation.

Published Feb 27, 2025 · Updated Feb 28, 2025 · Assigned by mitre

Description

In XIQ-SE before 24.2.11, a low-privileged user may be able to access admin passwords, which could lead to privilege escalation.

References

https://community.extremenetworks.com/t5/security-advisories-formerly/sa-2024-105-xiq-se-unauthorized-access-to-user-credentials-cve/ba-p/116363