PT-2024-26306 · Lunar · Lunar

Published 2024-05-08 · Updated 2024-05-09 · CVE-2024-3507

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Lunar software versions 6.0.2 through 6.6.0

Description The issue is related to improper privilege management in the Lunar software, allowing an attacker to perform a secondary process injection into the application. This can lead to the abuse of rights to access sensitive user information.

Recommendations For versions 6.0.2 through 6.6.0, update to a version that includes a fix for the improper privilege management issue to prevent secondary process injection and access to sensitive user information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2024-3507

Affected Products

Lunar

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-3507 · Security Note
• https://twitter.com/linuxpatch/status/1788181250416538070 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1788184867613593906 · Twitter Post
• https://twitter.com/CVEnew/status/1788250784225697986 · Twitter Post
• https://incibe.es/en/incibe-cert/notices/aviso/privilege-escalation-vulnerability-lunar · Note
• https://twitter.com/cracbot/status/1788498350750183715 · Twitter Post
• https://t.me/cvenotify/79670 · Telegram Post
• https://t.me/cvenotify/79568 · Telegram Post