PT-2024-34869 · Secusuite · Secusuite

Published 2024-11-12 · Updated 2024-11-13 · CVE-2024-51722

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SecuSUITE versions 5.0.420 and earlier

Description A local privilege escalation issue in the SecuSUITE Server (System Configuration) could allow a successful attacker that had gained control of code running under one of the system accounts listed in the configuration file to potentially issue privileged script commands.

Recommendations For SecuSUITE versions 5.0.420 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-250

Related Identifiers

CVE-2024-51722

Affected Products

Secusuite

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-51722 · Security Note
• https://t.me/cvedetector/10698 · Telegram Post
• https://twitter.com/CVEnew/status/1856409903147168009 · Twitter Post
• https://support.blackberry.com/pkb/s/article/140220 · Note