Skip to content
OpenAdvisories
Medium · 6.0 CVE-2024-6908 EUVD-2024-47897GHSA-vwc8-7rg6-jffc

Admin Can Escalate Privileges to SuperAdmin Using Manual PUT Request

Published Jul 19, 2024 · Updated Aug 1, 2024 · Assigned by Yugabyte

Description

Improper privilege management in Yugabyte Platform allows authenticated admin users to escalate privileges to SuperAdmin via a crafted PUT HTTP request, potentially leading to unauthorized access to sensitive system functions and data.

Affected products

VendorProductAffectedFixed
YugabyteDB YugabyteDB Anywhere — —

References