Skip to main content

Not Failing Securely ('Failing Open')

CVE-2024-43532

High
8.8/10

Summary

Remote Registry Service Elevation of Privilege Vulnerability

  • LOW
  • NETWORK
  • HIGH
  • UNCHANGED
  • NONE
  • LOW
  • HIGH
  • HIGH

CWE-636 - Not Failing Securely ('Failing Open')

When the product encounters an error condition or failure, its design requires it to fall back to a state that is less secure than other options that are available, such as selecting the weakest encryption algorithm or using the most permissive access control restrictions.

References

Advisory Timeline

  • Published