Authentication Bypass by Spoofing
CVE-2024-5812
Summary
A low severity vulnerability in BIPS has been identified where an attacker with high privileges or a compromised high privilege account can overwrite Read-Only smart rules via a specially crafted API request.
- HIGH
- NETWORK
- LOW
- UNCHANGED
- NONE
- HIGH
- LOW
- NONE
CWE-290 - Authentication Bypass by Spoofing
This attack-focused weakness is caused by improperly implemented authentication schemes that are subject to spoofing attacks.
References
Advisory Timeline
- Published
