Critical · 9.8 CVE-2024-38292 EUVD-2024-53958GHSA-m73p-w5w2-3m5h

In Extreme Networks XIQ-SE before 24.2.11, due to a missing access control check, a path traversal is possible, which may lead to privilege…

Published Feb 27, 2025 · Updated Mar 14, 2025 · Assigned by mitre

Description

In Extreme Networks XIQ-SE before 24.2.11, due to a missing access control check, a path traversal is possible, which may lead to privilege escalation.

References

https://community.extremenetworks.com/t5/security-advisories-formerly/sa-2024-104-xiq-se-path-traversal-privilege-escalation-cve-2024/ba-p/116362