PT-2024-39656 · Unknown · Upkeeper Instant Privilege Access

Published 2024-10-03 · Updated 2024-11-22 · CVE-2024-9479

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions upKeeper Instant Privilege Access versions prior to 1.2

Description The issue is related to Improper Privilege Management, allowing Privilege Escalation in upKeeper Instant Privilege Access.

Recommendations For versions prior to 1.2, update to version 1.2 or higher to resolve the issue.

Fix

Improper Privilege Management

Incorrect Privilege Assignment

Weakness Enumeration

CWE-269

CWE-266

Related Identifiers

BDU:2025-02263

CVE-2024-9479

Affected Products

Upkeeper Instant Privilege Access

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2024-9479 · Security Note
• https://bdu.fstec.ru/vul/2025-02263 · Security Note
• https://t.me/pentestingnews/53510 · Telegram Post
• https://support.upkeeper.se/hc/en-us/articles/17007729905436-CVE-2024-9479-Improper-Privilege-Management-Subprocess · Note
• https://twitter.com/the_yellow_fall/status/1859777382309405129 · Twitter Post
• https://twitter.com/Dinosn/status/1859821189109252346 · Twitter Post
• https://twitter.com/CveFindCom/status/1859553223062810656 · Twitter Post
• https://t.me/cvedetector/11604 · Telegram Post
• https://twitter.com/CVEnew/status/1859233076267864345 · Twitter Post
• https://twitter.com/CCBalert/status/1859631839805088069 · Twitter Post
• https://twitter.com/fridaysecurity/status/1859777418040685006 · Twitter Post